Granbury Eye Clinic (TX healthcare provider) reported to HHS OCR on 2022-07-29 that its unnamed business associate suffered a ransomware attack exposing PHI of 16,475 individuals. Affected data included names, DOB, addresses, SSNs, lab results, medications, diagnoses, and other treatment information stored in electronic medical records. The CE notified HHS, affected individuals, media, and provided substitute notice. The BA offered complimentary credit monitoring and implemented additional administrative and technical safeguards. OCR provided technical assistance on the HIPAA Breach Notification Rule.
Affected (this filing): 16,475