Advanced Medical Practice Management

Advanced Medical Practice Management, the business associate (BA), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 56,427 individuals. The PHI involved included names, Social Security numbers, financial information, drivers’ license and/or state identification numbers, dates of birth, passport numbers, electronic signature information, prescription information, medical record numbers, diagnoses, health insurance information, and other treatment information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the BA offered free credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its sensitive data. All staff were retrained.