The Guidance Center, Inc.

The Guidance Center, Inc. reported to HHS on 2022-04-05 a Hacking/IT Incident affecting 23,104 individuals. Breached information located on Email. Employees were victims of an email phishing attack compromising PHI including names, addresses, DOB, driver's licenses, SSNs, financial info, diagnoses, lab results, and medications. The CE provided credit monitoring and identity theft services, implemented safeguards, and retrained staff.

The Guidance Center, a non-profit mental health agency, detected unusual activity on March 25, 2019, including deleted files and reconfigured remote access. Investigation revealed a former employee gained unauthorized remote access to certain email accounts containing PHI (names, SSNs, medical info) of 1,235 California residents. The incident occurred between March 15 and April 1, 2019. TGC engaged forensic experts, notified law enforcement (FBI, Long Beach PD), and restored systems. Affected individuals were notified on October 28, 2019, and offered one year of credit monitoring.

The Guidance Center (CA, Healthcare Provider) reported to HHS on 2019-10-28 a Hacking/IT Incident affecting 1,189 individuals. A former employee impermissibly accessed numerous email accounts containing ePHI, including names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media, implemented additional safeguards, retrained staff, and received OCR technical assistance on its security management process. Breached information located on Email.