James Kagan, MD

James Kagan, MD reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-01-06. 1 Massachusetts residents were affected. The report records the breach type as electronic.

James Kagan, MD (CO) reported to HHS OCR on 2021-12-22 a Hacking/IT Incident affecting 1,310 individuals. An employee was subject to a phishing attack resulting in unauthorized access to an email account containing patient information. Upon investigation, OCR determined that James Kagan, MD is not a covered entity or business associate subject to the HIPAA Privacy, Security, and Breach Notification Rules. Breached information located on Email.

James Kagan, MD notified patients that an unauthorized individual accessed an employee email account between July 10-13, 2021. The breach was discovered on November 24, 2021, after forensic review revealed patient names were stored in the account. No evidence of misuse was found. The practice reset passwords and implemented new protocols.

JAMES KAGAN MD filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-521). The register records the breach as discovered on July 10, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.