Southeastern Council on Alcoholism and Drug Dependence

The covered entity (CE), The Southeastern Council on Alcoholism and Drug Dependence, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 25,148 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, and health insurance and treatment information. The CE notified HHS, affected individuals, the media, and offered complimentary credit monitoring and identity restoration services. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect its ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.