Medical Business Management (AL), a Business Associate, reported to HHS OCR on 2021-08-25 a ransomware attack on its Network Server affecting the PHI of 1,750 individuals. Exposed data included names, dates of birth, Social Security numbers, addresses, diagnoses, and financial/treatment information. The BA notified HHS, affected individuals, the media, and posted a substitute breach notice. Complimentary credit monitoring was offered. Additional technical safeguards were implemented and OCR provided HIPAA technical assistance.
Affected (this filing): 1,750