Cancer Care Center of North Florida

Cancer Care Center of North Florida, the covered entity (CE), reported that its business associate (BA) experienced a cybersecurity attack that compromised the protected health information (PHI) of 1,798 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, social security numbers, diagnoses/conditions, diagnostic imaging, diagnostic test results, lab results, medications, financial and health insurance information, and other treatment information. The CE notified HHS, the affected individuals, and the media about the breach as well as posting substitute notice on its website. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect PHI.