Seneca Family of Agencies

The business associate (BA), Seneca Family of Agencies, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 27,309 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, phone numbers, email addresses, medical record numbers, diagnoses, health insurance information, prescription information, drivers’ license/state identification numbers, and other treatment information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the BA implemented additional administrative and technical safeguards to better protect PHI.