norm: healthfirst bluegrassno LEI · no CIKMax severity: Medium

Canonical registry

HealthFirst Bluegrass

ent_7583c05a06cc18d8f6272efb

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

971

as filed · HHS OCR KY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: HealthFirst Bluegrass
Normalized: healthfirst bluegrass— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

KYHHS OCRas victim2020-08-21
HealthFirst Bluegrass (KY) reported to HHS on 2020-08-21 a Hacking/IT Incident affecting 971 individuals. An employee was the victim of an email phishing scheme that exposed ePHI including names, addresses, dates of birth, driver's license numbers, Social Security numbers, claims information, financial information, diagnoses, lab results, and medications. Breached information located in Email. The CE notified HHS, affected individuals, and media, offered credit monitoring, sanctioned the responsible employee, and implemented additional administrative and technical safeguards. OCR obtained assurances of corrective action.