Mosaic

Mosaic Medical reported to HHS on 2015-03-05 an Unauthorized Access/Disclosure affecting 2207 individuals. Breached information located on Paper/Films. An intruder entered the administrative office through a window and accessed PHI including names, medical info, insurance info, addresses, phone numbers, and email addresses. The CE moved offices and retrained staff.

Mosaic reported that multiple employee email accounts were compromised in a phishing attack, exposing the protected health information (PHI) of approximately 3,857 clients. The exposed data included names, dates of birth, addresses, telephone numbers, government-issued identification numbers, medical and insurance numbers, and in some instances social security numbers. In response, Mosaic blocked the attacker's IP address, contacted authorities, and provided additional training to staff.