St. Joseph's/Candler Health System, a Georgia-based healthcare provider, reported a ransomware attack affecting PHI of approximately 1,400,000 individuals. Affected data included names, addresses, dates of birth, driver's license and Social Security numbers, claims information, and diagnoses. The CE notified HHS, affected individuals, and the media; provided substitute notice; offered complimentary credit monitoring; and implemented additional administrative, technical, and security safeguards. Data was located on a network server. No business associate was reported.
Affected (this filing): 1,400,000