Humana Inc. (covered entity) reported that one of its business associates suffered a ransomware attack that affected the ePHI of 1,965 individuals. Compromised data included names, addresses, dates of birth, Social Security numbers, and claims/financial information. The BA notified affected individuals and the media and implemented additional technical and security safeguards; HHS OCR provided technical assistance on the HIPAA Breach Notification Rule.
Affected (this filing): 1,965