Gold Coast Health Plan

The covered entity (CE), Gold Coast Health Plan, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 540 individuals. The PHI included demographic information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE and BA implemented additional administrative, technical, and security safeguards to better protect PHI.

Gold Coast Health Plan reported to HHS OCR on October 5, 2018 a Hacking/IT Incident (phishing) affecting 37,005 individuals. Phishing attacks compromised workforce members' email accounts. PHI exposed included names, dates of birth, Medi-Cal numbers, health plan names, claims information, diagnoses/conditions, and other treatment information. Breached information located in Email.

Gold Coast Health Plan suffered a phishing attack compromising an employee email account between June 18 and August 1, 2018. The incident was discovered on August 8, 2018. Protected health information, including health plan ID numbers, dates of service, and in some cases names and dates of birth, was potentially disclosed. No financial information or SSNs were accessed. The organization engaged cybersecurity experts, notified law enforcement, and implemented enhanced security measures and employee training.