Sony Pictures Entertainment (SPE) reported the hack involving PHI from its Health and Welfare Benefits Plan to HHS, thereby hopefully ending the debate in some media as to whether they were a HIPAA-covered entity.
According to SPE’s submission, the hack affected 30,000 plan participants or their dependents.