Navicent Health, Inc.

Navicent Health, Inc. (GA) reported to HHS on 2019-08-23 a Hacking/IT Incident affecting 634 individuals via an employee email phishing attack. Exposed ePHI included names, addresses, dates of birth, SSNs, claims and financial information, diagnoses, and medications. Breached information located in Email. The CE sanctioned the responsible employee and strengthened administrative, technical, and security safeguards.

Navicent Health notified individuals of a cyber-attack in July 2019 where unauthorized third-party access to employee email accounts may have exposed personal information including SSNs, DOBs, bank accounts, and medical data. Forensic investigation confirmed potential access on Jan 24, 2019. No fraud confirmed. Credit monitoring offered.

Navicent Health filed a supplemental notice with the NH AG regarding a July 2019 cyber attack where unauthorized parties accessed employee email accounts. The incident exposed patient names, DOB, medical info, and bank details. 23 NH residents affected. Discovery confirmed Jan 24, 2019. Notifications sent starting June 18, 2019.

Navicent Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-03-26. 69 Massachusetts residents were affected. The report records the breach type as electronic.

Navicent Health, Inc. reported to HHS on 2019-03-22 a Hacking/IT Incident affecting 404,993 individuals. Breached information located on Email. Employees were victims of an email phishing scheme exposing ePHI including names, DOB, addresses, SSNs, diagnoses, medications, and financial data.

Navicent Health notified the NH AG of a July 2018 cyber attack where unauthorized parties accessed employee email accounts. Discovered Jan 24, 2019, the breach impacted 20 NH residents (plus 7 in RI). Data included names, DOB, SSNs, bank accounts, and medical info. Navicent notified law enforcement, engaged forensic firms, reset credentials, and offered credit monitoring.