CareTree, Inc. (IL), a business associate, reported to HHS OCR on 2023-11-15 a ransomware incident affecting 15,846 individuals. Breached PHI on network servers included names, addresses, dates of birth, drivers' license and SSNs, diagnoses, conditions, lab results, medications, and financial/medical information. CareTree notified HHS, affected individuals, media, and posted substitute notice. Additional administrative and technical safeguards were implemented. OCR provided technical assistance.