The business associate (BA), TTEC Healthcare Solutions, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 86,305 individuals. The PHI involved included names, Social Security numbers, drivers’ license numbers, dates of birth, and addresses. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance to the BA regarding the HIPAA Security Rule.
