Andrea Yaley, DDS (CA) received a ransomware notice that encrypted its computers, affecting approximately 1,200 individuals. PHI involved included full names, addresses, dates of birth, social security numbers, claims information, billing codes, and clinical information. The CE notified HHS, affected individuals, and the media, and reported to law enforcement. Patient files were restored from backups. Corrective actions included updated policies, equipment upgrades, and active monitoring of computer activity. OCR obtained assurances of implementation.
Affected (this filing): 1,200