Lawrence General Hospital (MA) reported to HHS OCR that a business associate suffered a cyberattack (Hacking/IT Incident on a network server) affecting PHI of 76,571 individuals. Compromised data included names, addresses, Social Security numbers, dates of birth, and financial and treatment information. The hospital notified HHS, affected individuals, and the media, and offered complimentary credit monitoring. The business associate is not named in the OCR portal entry.
Affected (this filing): 76,571