Shingle Springs Health and Wellness Center

Shingle Springs Health and Wellness Center (CA) reported to HHS OCR on 2019-06-05 a ransomware attack on a Network Server affecting the PHI of 21,513 individuals. Exposed data included names, addresses, Social Security numbers, telephone numbers, health insurance information, and treatment information. The CE notified HHS, affected individuals, and the media. Following OCR's investigation, the CE revised HIPAA policies, retrained staff, and implemented new technical safeguards; OCR obtained assurances of corrective actions.