Tallahassee Memorial Healthcare, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 20,376 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, health insurance information, medical record numbers, patient account numbers, and some treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to this breach, the CE implemented additional administrative, technical, and security safeguards.
