Rehabilitation Support Services, the covered entity (CE) reported that its business associate (BA) was the subject of a cyber-attack that affected the protected health information (PHI) of 1,237 individuals. The PHI involved included clinical and demographic information. The CE provided notification to the affected individuals.
