Perry Johnson & Associates, Inc. dba PJ&A

The business associate (BA), Perry Johnson & Associates, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 9,302,588 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.