norm: baptist health louisvilleno LEI · no CIKMax severity: Medium

Canonical registry

Baptist Health Louisville

ent_19f3b9837812b107213f9a8d

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

880

nationwide · HHS OCR KY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Baptist Health Louisville
Normalized: baptist health louisville— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

KENTUCKYHHS OCRas victim2017-11-21
Baptist Health Louisville (KY) reported to HHS OCR on 2017-11-21 a Hacking/IT Incident (phishing) affecting 880 individuals. Two employees fell victim to phishing on separate days, exposing PHI including names, dates of birth, addresses, Social Security numbers, and clinical information. Breached information was located in Email. The CE retrained employees on identifying/reporting phishing emails. OCR reviewed HIPAA policies and obtained assurances of corrective action.