Rebekah Children's Services

The covered entity (CE), Rebekah Children’s Services, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,033 individuals. The PHI involved included names, birthdates, diagnoses, lab results, medications, email addresses, phone numbers, Social Security and drivers’ license numbers, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE updated its administrative and technical safeguards to better protect sensitive data. OCR provided technical assistance regarding the HIPAA Rules.