Idaho Department of Health & Welfare (covered entity) reported to HHS OCR on 2023-06-12 that its business associate experienced a cyber-attack compromising PHI (names and treatment information) of approximately 2,501 individuals. PHI resided on a network server. The CE notified HHS, affected individuals, and the media; CE and BA revised policies and procedures as mitigation.
Affected (this filing): 2,501