Drexel Medicine
ent_53d7faee882fc013ffa71b9d
Disclosures
2
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
4,340
nationwide · HHS OCR PA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Drexel Medicine
- Normalized
- drexel home— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- drexel.edu
Disclosure history (2)newest first
- Montana State AGas reporting2019-11-22
Drexel Medicine notified patients of a phishing incident where an unauthorized actor accessed an employee email account between June 8-10, 2019. The actor may have viewed PHI including names, medical record numbers, and health insurance info. Discovery was June 10, 2019. No evidence of misuse found.
- PENNSYLVANIAHHS OCRas reporting2019-08-07
Drexel Medicine (PA) reported to HHS OCR on 2019-08-07 a Hacking/IT Incident affecting 4,340 individuals (HHS listed count; description notes ~19,750 ePHI records involved). The breach resulted from an email phishing scheme that exposed ePHI including names, Social Security numbers, birthdates, diagnoses, and other treatment information stored in Email systems. The covered entity implemented additional technical safeguards in response. Drexel Medicine has since ceased operations.