MNHHS OCRFirst filing
Filed Dec 29, 2016bd_3e1b196176065006
PrimeWest Health (MN, Health Plan) reported to HHS OCR on 2016-12-29 a Hacking/IT Incident affecting 2,441 individuals. On November 15, 2016, business associate Summit Reinsurance notified PrimeWest Health of a ransomware incident on a network server containing CE data. PHI exposed included names, addresses, dates of birth, and Social Security numbers. The BA mitigated by taking the server offline, confirming ransomware was isolated to one server, and removing remote access. OCR obtained documented assurances of corrective actions.
Affected (this filing): 2,441
HHS notified