Sequoia Benefits and Insurance Services, LLC

The covered entity (CE), Sequoia Benefits and Insurance Services dba Sequoia Consulting Group, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 4,265 individuals. The PHI involved included names, dates of birth, addresses, financial and claims information, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, the media, and provided substitute notice. Upon discovery of the breach, the CE implemented additional administrative and technical safeguards to better protect PHI.