Hackers caused a breach of protected health information (PHI) at Patterson Dental Supply, Inc., a business associate (BA) of the covered entity (CE), Massachusetts General Hospital. The breach affected the PHI of approximately 4,293 individuals, and included demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. OCR’s investigation revealed that the CE and BA had a business associate agreement in place at the time of the breach. OCR has opened a separate review of the BA concerning the underlying breach.
Affected (this filing): 4,293