Personal Touch Hospice of VA, Inc. reported that its business associate suffered a ransomware attack affecting ePHI of 1,657 individuals. Affected data included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, lab results, medications, and other treatment information. The covered entity notified HHS, affected individuals, and the media; did not renew the BA contract; implemented additional technical and security safeguards; and retrained staff.
Affected (this filing): 1,657