Mosaic

Mosaic reported that multiple employee email accounts were compromised in a phishing attack, exposing the protected health information (PHI) of approximately 3,857 clients. The exposed data included names, dates of birth, addresses, telephone numbers, government-issued identification numbers, medical and insurance numbers, and in some instances social security numbers. In response, Mosaic blocked the attacker's IP address, contacted authorities, and provided additional training to staff.