Catawba Valley Medical Center, Inc.

Catawba Valley Medical Center notified patients that unauthorized access to employee email accounts occurred in July-August 2018. The incident may have exposed names, DOBs, SSNs, health info, and insurance details. CVMC hired forensic investigators, secured accounts, and offered one year of credit monitoring.

Catawba Valley Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-10-23. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Catawba Valley Medical Center notified the NH AG of an incident affecting 3 NH residents. Unauthorized access to employee email accounts occurred in July-August 2018, discovered Aug 24, 2018. Data included names, DOB, SSNs, health info, and insurance info. CVMC engaged forensic investigators, secured accounts, and offered credit monitoring.

Catawba Valley Medical Center (NC) reported to HHS on 2018-10-12 a Hacking/IT Incident (phishing) affecting 20,000 individuals (22,952 per investigation). In August 2018, an unauthorized person accessed email accounts of three employees via phishing. PHI compromised included demographic and health insurance information. Breached information located on Email. Remediation included MFA, password resets, enhanced monitoring, staff training, and a suspicious-email reporting plugin. OCR provided technical assistance and obtained corrective-action assurances.