Refuah Health Center, the covered entity (CE), reported that it experienced a malware attack that compromised the protected health information (PHI) of 260,740 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, financial information, lab results, medications, state identification numbers, diagnoses, and health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. To prevent a similar breach from happening in the future, the CE implemented additional administrative, technical, and security safeguards.
