SUMMA HEALTH

Summa Health (OH) reported to HHS on 2025-01-10 an Unauthorized Access/Disclosure affecting 874 individuals. A workforce member impermissibly accessed PHI stored in Electronic Medical Records, including names, addresses, birthdates, Social Security numbers, diagnoses, lab results, medications, and other treatment information. The covered entity sanctioned the workforce member and implemented additional administrative safeguards. No business associate was involved.

Summa Health (OH) reported to HHS on 2019-06-28 a Hacking/IT Incident (email phishing) affecting 7,989 individuals. Several employees were victims of an email phishing scheme. PHI exposed included names, dates of birth, Social Security numbers, health insurance information, email addresses, diagnoses/conditions, medications prescribed, and treatment information. The CE notified affected individuals, media, and provided substitute notice. OCR obtained assurances of corrective action. Breached information located on Email.

Summa Health reported to HHS on 2019-06-28 a Hacking/IT Incident affecting 2904 individuals. Breached information located on Email. Employees were victims of an email phishing scheme exposing PHI including names, MRNs, DOB, SSN, driver's license, and financial data. The CE implemented safeguards and retrained staff.

Summa Health reported a data breach to the Oregon Attorney General. The breach was reported on 2019-06-28. The breach occurred during 3/11/2019 - 3/29/2019. The breach was discovered on 5/1/2019. 7,989 individuals were affected. Notice was sent on 6/28/2019.