AU MEDICAL CENTER, INC.

AU Medical Center, INC reported to HHS on 2018-08-16 a Hacking/IT Incident affecting 472413 individuals. Breached information located on Email. Employees were victims of an email phishing attack exposing ePHI including names, addresses, DOB, SSN, driver's license numbers, financial info, and medical records. The CE implemented additional safeguards and retrained employees.

AU Medical Center, Inc. (GA, healthcare provider) reported to HHS OCR on 2017-09-15 that multiple employees were victims of an email phishing attack, exposing ePHI of 6,109 individuals. Compromised data included names, addresses, dates of birth, SSNs, financial information, driver's license numbers, medical record numbers, health insurance and prescription information, and diagnoses/treatment information. The covered entity notified HHS, affected individuals, the media, and provided substitute notice on its website. Remediation included additional administrative and technical safeguards and employee retraining on email security.

On September 7, 2016, a cyber-attacker sent a phishing email to Augusta University Medical Center, Inc. (GA) and obtained employee usernames and passwords. The attacker accessed a self-service portal to redirect employee paychecks. PHI of 4,690 individuals was exposed, including addresses, dates of birth, medical record numbers, insurance, prescription and treatment information, and, for some, Social Security numbers. HHS breach submission filed 2017-05-26; 5,600 individuals listed as affected. Breached information located in Email.