West Virginia Senior Advantage

The covered entity (CE), West Virginia Senior Advantage, reported that its business associate’s (BA) subcontractor suffered a cyber-attack that affected the electronic protected health information (ePHI) of 1,049 individuals. The ePHI involved included names, dates of birth, Social Security numbers, diagnoses and conditions, medications prescribed, and other treatment information. The BA’s subcontractor notified affected individuals and offered complimentary credit monitoring services. The CE notified HHS, the media, and posted substitute notice on its website.