MGA Home Healthcare Colorado, Inc.
ent_24ea7f0e05624f09fd14d757
Disclosures
2
HHS OCR · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
3,119
as filed · HHS OCR FEDERAL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- MGA Home Healthcare Colorado, Inc.
- Normalized
- mga home healthcare colorado— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- AZHHS OCRas victim2017-10-25
MGA Home Healthcare Colorado, Inc. (AZ) reported to HHS on 2017-10-25 a Hacking/IT Incident (email phishing attack) affecting 2,898 individuals per HHS portal (the web description notes ~10,871 individuals). A workforce member fell victim to a phishing email, exposing PHI including demographic information, health insurance information, claims histories, dispute information, health plan beneficiary numbers, and subscriber identification. Breached information located on Email. CE implemented MFA, strengthened passwords, and retrained staff following an OCR investigation.
- FEDERALHHS OCRas victim2016-10-19
An employee's laptop containing PHI (demographic and clinical information) of approximately 3,260 individuals (HHS breach report lists 3,119 affected) was stolen from a locked vehicle between Aug 19-20, 2016. MGA Home Healthcare Colorado reported to law enforcement and HHS, notified individuals and media, offered free credit monitoring, and implemented remediation including laptop encryption, stronger passwords, improved physical security, updated risk analysis/management plans, workforce sanctions (including termination), and retraining. OCR reviewed the corrective actions.