UC Davis Medical Center

UC Davis Health reported to HHS on 2023-07-28 a Hacking/IT Incident affecting 3201 individuals. Breached information located on Email. An employee was the subject of an email phishing attack compromising PHI including names, DOB, SSNs, diagnoses, and medications.

On May 24, 2023, UC Davis Health discovered that an unauthorized external individual accessed an employee's work email account. The breach potentially exposed patient health information, including names and follow-up care details. UC Davis Health froze the compromised credentials and offered 12 months of credit monitoring to affected individuals.

UC Davis Health System detected unauthorized access to a provider's email account on September 26, 2014. The breach, occurring on September 25, 2014, resulted in potential impermissible access to patient health information contained in emails. No financial, billing, or social security numbers were exposed. Notifications were sent to affected patients on October 3, 2014.

UC Davis Medical Center reported to HHS on 2014-10-08 a Hacking/IT Incident affecting 1326 individuals. Breached information located on Email. A provider's account was compromised via credential-stealing malware, exposing clinical and demographic data.

UC Davis Medical Center reported to HHS on 2014-02-14 a Hacking/IT Incident affecting 2269 individuals. Breached information located on Email. A fraudulent phishing email instructed employees to input authentication credentials on a fake site, impacting three accounts containing ePHI of 2,269 individuals.

UC Davis Health System notified patients that a medical provider's email account was compromised via a phishing scam on December 13, 2013. Affected data included names, medical record numbers, and clinic visit dates. No financial information or SSNs were involved. The organization deleted the phishing email, blocked the website, and warned staff.