Perry Johnson & Associates

Perry Johnson & Associates, Inc. (PJ&A), a healthcare transcription service provider and HIPAA business associate, experienced unauthorized access to personal health information (PHI) between April 7 and April 19, 2023. The incident was discovered on May 2, 2023. Affected data included names, dates of birth, addresses, medical record numbers, diagnoses, and potentially Social Security numbers and clinical information. PJ&A engaged external cybersecurity vendors, notified law enforcement and HHS, and implemented technical restrictions and password resets. No evidence of identity theft or fraud was identified at the time of notification.