Saint Peter's University Hospital

The covered entity (CE), Saint Peter’s University Hospital, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 585 individuals. The ePHI involved included names, Social Security numbers, addresses, dates of birth, medical diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. The BA provided affected individuals with free credit monitoring and related services. In its mitigation efforts, the CE disabled the interface between its computer system and the BA’s computer system to better protect its ePHI.