HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of May 3, 2024.
- Organization as reported
- Grayson & Associates, AL
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- May 3, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9931, row:1070)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Grayson & Associates, reported that it experienced a hacking incident that affected the protected health information (PHI) of 573 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, claims information, diagnoses/conditions, medications, and financial information. The CE notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.