Wedge Medical Center

The covered entity (CE), The Wedge Medical Center, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 25,491 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, claims information, diagnoses and conditions, lab results and medications prescribed. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. The CE also provided complimentary credit monitoring services to affected individuals. In response to the breach, the CE implemented additional administrative, technical and security safeguards.