Prisma Health-Midlands

Prisma Health-Midlands reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-11-08. 8 Massachusetts residents were affected. The report records the breach type as electronic.

Prisma Health — Midlands notified NH AG of a data incident where a team member's login credentials were compromised, granting access to patient pre-registration forms containing PII and PHI. 2 NH residents were notified on 2019-10-31. Prisma Health reset passwords, implemented safeguards, and notified HHS OCR.

Prisma Health - Midlands notified individuals that a team member's login credentials were compromised on August 29, 2019. The compromised credentials provided access to patient pre-registration and volunteer registration forms on the Palmetto Health website. Affected data included names, dates of birth, SSNs, addresses, and health information. Prisma Health reset the password, blocked access to the forms, and offered one year of free credit monitoring and identity theft insurance.

Prisma Health - Midlands reported to HHS on 2019-10-28 a Hacking/IT Incident affecting 19060 individuals. Breached information located on Other. Employee credentials posted for sale on dark web, exposing ePHI including names, DOB, SSN, addresses, and insurance info.

Prisma - Midlands reported to HHS on 2019-09-06 a Theft affecting 2770 individuals. Breached information located on Paper/Films. An employee's car was burglarized and a binder containing PHI (names, DOB, diagnoses, medications) was stolen. The CE notified HHS, affected individuals, and the media, and implemented additional administrative safeguards and staff retraining.