BAYSTATE HEALTH, INC.

Baystate Health notified the NH Attorney General of a phishing incident between Feb 7 and Mar 7, 2019, resulting in unauthorized access to employee email accounts. One New Hampshire resident's PHI, including name, address, DOB, SSN, Medicare number, and health information, was potentially exposed. Baystate secured accounts, engaged forensics, and offered credit monitoring.

Baystate Health (MA) reported to HHS OCR on 2019-04-05 a Hacking/IT Incident affecting 11,658 individuals. Several employees were victims of an email phishing scheme that compromised ePHI including names, addresses, dates of birth, Social Security numbers, health insurance information, treatment information, and financial information. Breached information was located in Email. The CE notified HHS, individuals, and media; provided credit monitoring; and implemented additional safeguards and staff training. OCR obtained assurances of corrective actions.

BAYSTATE HEALTH filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-177). The register records the breach as discovered on February 7, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Baystate Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-04-12. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Baystate Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-10-24. 21 Massachusetts residents were affected. The report records the breach type as electronic.

Baystate Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-10-21. 21 Massachusetts residents were affected. The report records the breach type as electronic.

Baystate Health, Inc. reported to HHS on October 21, 2016, a hacking incident that affected 13,112 individuals. The breach occurred on July 27, 2016, when five employees responded to a phishing email, allowing hackers to access their email accounts. The compromised information, located in the email accounts, potentially included patient names, demographic information, dates of birth, diagnoses, treatments, medical record numbers, and health insurance ID numbers. In response, the company retrained employees, issued phishing reminders, and improved technical safeguards.

Baystate Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-02-26. 4 Massachusetts residents were affected. The report records the breach type as electronic.