University of Wisconsin Hospitals and Clinics Authority

The covered entity (CE), University of Wisconsin Hospitals and Clinics Authority, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 4,563 individuals. The PHI included names, dates of birth, addresses, claims information, diagnoses/conditions, lab results, and medications. The CE notified HHS, the affected individuals, and the media. The CE implemented new policies and security awareness training as well as additional administrative, technical, and security safeguards.