The Medibase Group, Inc. (GA), a business associate, reported to HHS OCR on 2024-07-05 a ransomware attack affecting 117,957 individuals. Breached information was located on a Network Server. PHI exposed included names, dates of birth, Social Security numbers, financial information, and health insurance and treatment information. The BA notified affected individuals, media, and HHS on behalf of covered entities, implemented improved technical safeguards, and received HIPAA Security Rule technical assistance from OCR.