Recovery Centers of America, a Pennsylvania healthcare provider, reported a breach affecting 2,220 individuals after its business associate suffered a ransomware attack on a network server. Exposed PHI included names, addresses, and dates of birth. The covered entity notified HHS, affected individuals, and the media, and provided substitute notice. The business associate implemented additional technical safeguards in response.
Affected (this filing): 2,220