Walnut Place

The covered entity, Walnut Place, experienced a ransomware attack on a server containing electronic protected health information (ePHI), including demographic, clinical, and health insurance information for approximately 6,500 individuals. Upon discovery, the entity contained the attack by removing infected files. They notified HHS, affected individuals, and the media. Corrective actions included improving administrative and technical safeguards and retraining staff. OCR confirmed implementation of these corrective actions.

Affected (this filing): 5,000