Human Technology Inc., and its affiliates

Human Technology Inc., the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 24,580 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, government identification information, financial information, health insurance information and clinical information. The CE notified HHS, the affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE strengthened its technical safeguards. OCR provided technical assistance to the CE pertaining to the HIPAA Breach Notification and Security Rules.