Rheumatology Associates of Baltimore (covered entity) reported to HHS OCR that its business associate suffered a hacking/IT incident affecting a network server, exposing PHI of 28,968 individuals including names, addresses, dates of birth, and Social Security numbers. BA notified affected individuals and media; CE notified HHS. Both implemented additional administrative and technical safeguards.
Affected (this filing): 28,968