Atlanta Women’s Health Group notifying patients of April 2023 data breach

Atlanta Women’s Health Group disclosed that an unauthorized user accessed files containing protected health information for over 30,000 patients in April 2023, including demographic, clinical, and insurance details, while stating its EHR systems were not exposed and asserting no evidence of misuse and claimed deletion of the data; patients were notified on January 31, 2024, raising questions about compliance with HIPAA/HITECH’s 60-day notification requirement (as referenced by 11Alive and the group’s posted statement).