Blue Cross and Blue Shield of Alabama

Blue Cross and Blue Shield of Alabama (Health Plan, AL) reported to HHS OCR on 2022-07-19 a Hacking/IT Incident affecting 8,702 individuals. The covered entity's business associate was the subject of a ransomware attack that encrypted PHI stored on a network server. PHI involved includes names, addresses, email addresses, and health insurance information. The CE notified HHS, affected individuals, media, local law enforcement, and the FBI, and provided substitute notice. The BA implemented additional administrative and technical safeguards. OCR provided technical assistance on the HIPAA Privacy Rule.