Mat-Su Surgical Associates, APC

The covered entity (CE), Mat-Su Surgical Associates, reported that it was the victim of a ransomware attack affecting the electronic protected health information (ePHI) of 13,146 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, medications prescribed, and claims information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE implemented additional technical safeguards. OCR provided the CE with technical assistance regarding the HIPAA Security Rule.