PVHS-ICM Employee Health and Wellness, LLC as covered entity and business associate

PVHS-ICM Employee Health and Wellness, LLC (CO) reported to HHS OCR on 2017-07-03 a ransomware attack (Hacking/IT Incident) affecting 10,143 individuals. Breached ePHI resided on a Network Server and included names, Social Security numbers, addresses, dates of birth, lab results, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media, posted a substitute notice on its website, and offered complimentary credit monitoring. Technical safeguards were strengthened post-breach; OCR provided HIPAA Security Rule technical assistance.