The covered entity (CE), Wichita Urology Group, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 5,314 individuals. The PHI involved included names, dates of birth, gender, addresses, and telephone numbers. The CE notified HHS, affected individuals, the media, and provided substitute notice. A call center was created for questions or concerns. The CE terminated its business relationship with the BA.
