Brandman Centers for Senior Care

The covered entity (CE), Brandman Centers for Senior Care, reported that its business associate (BA) experienced a ransomware attack that affected the protected health information (PHI) of 521 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, diagnoses, medications prescribed, and claims information. The CE notified HHS and local law enforcement entities; the BA notified affected individuals and provided substitute notice on its website. Following OCR’s investigation, the CE reviewed and revised its policies and procedures to better protect its PHI.