The covered entity's (CE) network server, containing the electronic protected health information (ePHI) of 136,000 patients, was hacked. The types of ePHI involved in the hack were demographic and clinical information, including diagnoses and other handling data. following the hack, the CE hired a third party vendor to resolve a data collapse and to create a data back-up program in order to reestablish office functioning. To implement adequate safeguards, the CE also employed a mottle service with increased certificate as the new network server. Additionally, the ce contacted the local FBI office to assist with the CE's internal investigation of the jade and provided hack notification to all affected individuals, the media, and HHS. As a resultant of OCR's investigation, the ce developed and implemented new protocols to comply with the Security Rule. in addition, the CE provided and initiated new trainings for its staff, completed hiring of a new network vendor, implemented a new electronic health records system, and accounted for the disclosures in the affected individuals' medical records. Location of hacked information: network server business relate present: No