Good Samaritan Hospital Retirement Income Plan
ent_019e0b1fd1637868b0a8b61957f4551c
Disclosures
9
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
233,835
nationwide · HHS OCR CA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Good Samaritan Hospital Retirement Income Plan
- Normalized
- good samaritan hospital retirement income plan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300NWEJ6RI264Q877
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- California State AGas victim2020-07-29
Good Samaritan Hospital experienced a targeted phishing campaign resulting in unauthorized access to employee email accounts between Oct 28 and Nov 8, 2019. The incident was discovered on Nov 4, 2019. Affected data may include PHI, PII, SSNs, and financial account numbers. The attacker's goal was likely to redirect direct deposits. The hospital engaged forensic experts, reset credentials, and offered credit monitoring.
- Montana State AGas victim2020-07-01
Good Samaritan Hospital notified patients of a phishing campaign targeting employee email accounts. Unauthorized access occurred between Oct 28 and Nov 8, 2019. Affected data included names, DOB, SSNs, driver's licenses, financial account numbers, and PHI. The attacker's goal was redirecting direct deposits. No evidence of misuse found. Credit monitoring offered.
- Indiana State AGas victim2020-06-01
Good Samaritan Hospital, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2019-10-22 and was reported on 2020-06-01. 80 Indiana residents were affected. 11,891 individuals affected in total.
- Massachusetts State AGas victim2020-05-29
Good Samaritan Hospital, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-05-29. 127 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2020-05-29
Good Samaritan Hospital, Inc. experienced a targeted email phishing campaign resulting in unauthorized access to employee email accounts between October 28 and November 8, 2019. The incident was discovered on November 4, 2019. Affected data may include names, dates of birth, SSNs, driver's license numbers, passport numbers, tax IDs, financial account numbers, and protected health information (PHI) such as treatment diagnoses and medical history. The attacker's goal was believed to be redirecting direct deposit payments. The hospital reset passwords, implemented additional security measures, engaged forensic experts, and offered one year of credit monitoring via Kroll.
- CALIFORNIAHHS OCRas victim2020-04-17
Good Samaritan Hospital, Inc. reported to HHS on 2020-04-17 a Hacking/IT Incident affecting 233,835 individuals. Breached information located on Email. A phishing attack compromised employee email accounts, exposing PHI including names, SSNs, and medical data. The entity settled with OCR for $600,000 and implemented a corrective action plan.
- Illinois State AGas victim2020-01-01
GOOD SAMARITAN HOSPITAL filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-249). The register records the breach as discovered on November 4, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2020-01-01
GOOD SAMARITAN HOSPITAL filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-270). The register records the breach as discovered on July 7, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- CALIFORNIAHHS OCRas victim2013-10-25
Good Samaritan Hospital (operated as Samaritan Regional Health System) reported a breach to HHS on 2013-10-25 affecting 3,833 individuals. The covered entity mismatched names and addresses in a mailing to former patients of a recently deceased physician, exposing the PHI (names and addresses) of approximately 2,203 individuals. Remediation included staff retraining on address validation and new audit procedures for mailings.