Rainbow Dental Care

Rainbow Dental Care, PLLC, the covered entity (CE), reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 7,186 individuals. The ePHI involved included names, dates of birth, addresses, Social Security numbers, financial information, medications prescribed, and diagnoses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional technical and security safeguards to better protect its sensitive data. OCR provided technical assistance to the CE regarding the administrative and technical requirements of the HIPAA Security Rule.