Department of Health and Human Services, Office of Civil Rights (OCR), FACT SHEET: Ransomware and HIPAA (Aug. 2016) (full-text).