Laird Hospital, Inc. (a Mississippi healthcare provider) reported that its business associate suffered a ransomware attack affecting the ePHI of 1,092 individuals. Compromised data included names, dates of birth, addresses, prescribed medications, and other treatment information. The covered entity notified HHS, affected individuals, and the media. The business associate strengthened administrative and technical safeguards; OCR obtained assurances the corrective actions were implemented.
Affected (this filing): 1,092