The business associate (BA), Smith, Gambrell & Russell, LLP, reported that it experienced a hacking incident that affected the protected health information (PHI) of 4,688 individuals. The PHI involved included demographic, clinical, and financial information. The BA notified HHS and affected individuals. In response to the breach, the BA issued media, substitute and individual notice, and implemented additional administrative, technical, and security safeguards.
