Roots

The covered entity (CE), Roots, reported that it was the subject of a data breach that affected the protected health information (PHI) of 2,000 individuals. The type of PHI involved demographic and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.