Santa Clarita Community College District

The covered entity (CE), Santa Clarita Community College District, reported that its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 2,324 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and claims and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE confirmed it is not a CE and the breach report should therefore not have been filed.