UMass Memorial Health Care Master Pension Trust

UMass Memorial Health Care (MA) reported to HHS on 2022-02-28 a Hacking/IT Incident (email phishing) affecting 4,270 individuals. Several employees were targeted by a phishing scheme compromising PHI including names, SSNs, dates of birth, addresses, driver's license numbers, diagnoses, lab results, and health insurance information. Breached information was located in Email. The CE notified HHS, individuals, and media, offered credit monitoring, and implemented additional safeguards and staff retraining.

UMass Memorial Health reported a phishing incident that occurred between June 24, 2020, and January 7, 2021. The breach was discovered on August 25, 2021. The incident compromised names and financial account numbers or credit/debit card numbers with their access codes. In response, the company offered one year of credit monitoring and identity theft protection services through Experian to the 3 affected Maine residents.

UMass Memorial Health Care, Inc. reported to HHS on 2021-10-15 a Hacking/IT Incident affecting 209,048 individuals. Breached information located on Email. An employee was the subject of an email phishing scheme affecting PHI including names, dates of birth, and Social Security numbers.

UMass Memorial Health notified the New Hampshire Attorney General of a phishing incident affecting employee email accounts. Unauthorized access occurred between June 24, 2020, and January 7, 2021. On August 25, 2021, the organization identified 17 New Hampshire residents whose PII (SSN, driver's license, financial account info) was contained in compromised emails. Total individuals notified under HIPAA was 1,370. Notifications began October 15, 2021, offering one year of credit monitoring.