HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Sept. 26, 2022.
- Organization as reported
- Kaye-Smith Enterprises, Inc., WA
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Sept. 26, 2022
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11164, row:2303)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), Kaye-Smith Enterprises, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 2,857 individuals. The PHI involved included, names, addresses, medical record numbers, and health insurance information. The BA notified HHS, and the covered entity notified the affected individuals and the media. In response to the breach, the BA implemented additional administrative and technical safeguards, retrained its workforce members, and provided complimentary credit monitoring services to affected individuals.