Mystic Valley Elder Services (MA) reported to HHS OCR on 2024-10-28 a ransomware attack affecting 85,133 individuals. PHI on a network server was compromised, including names, addresses, dates of birth, driver's license and Social Security numbers, financial and claims information, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. Remediation included implementing MFA, updating firewall and backup solutions, and additional technical safeguards.
Affected (this filing): 85,133