Lehigh Valley Women's Medical Specialties, P.C.

The covered entity (CE), Lehigh Valley Women’s Medical Specialties, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of 4,535 individuals. The PHI involved included names, dates of births, addresses, Social Security numbers, drivers’ license numbers, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services, implemented additional administrative and technical safeguards, revised its policies and procedures, and provided training to its workforce.