Healthfirst, a New York-based Health Plan, reported to HHS OCR on 2024-03-13 a ransomware incident affecting the PHI of 6,836 individuals. Breached information was located on a Network Server. PHI exposed included names, addresses, and dates of birth. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, offered free credit monitoring, and implemented additional safeguards and staff training.
Affected (this filing): 6,836