SERV Behavioral Health Systems

SERV Behavioral Health System, the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 8,110 patients. The PHI included names, addresses, dates of birth, drivers’ license and social security numbers, lab results, medications, and diagnoses/conditions. The CE notified HHS, the affected individuals, the media, and law enforcement officials. In its mitigation efforts, the CE implemented additional technical, administrative, and security safeguards.