kmj Health Solutions

The business associate (BA), KMJ Health Solutions, reported that it experienced a hacking attack that compromised the protected health information (PHI) of 2,191 individuals. The PHI involved included names, dates of birth, diagnoses/conditions, lab results, medications, and other treatment information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA updated/revised its relevant policies and procedures, implemented security enhancements, and increased its threat protections to better protect its PHI. OCR provided the BA with technical assistance regarding the HIPAA Rules.