Ankle and Foot Physicians and Surgeons PLLC

The covered entity (CE), Ankle and Foot Physicians and Surgeons, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 5,244 individuals. The ePHI involved included names and dates of birth. The CE notified HHS, affected individuals, the media, local law enforcement, and posted substitute notice on its website. In response to the breach, the CE hired a new IT provider, implemented additional administrative and technical safeguards, and retrained its staff on information security practices.