Vail Health Services
ent_9f67246aaf79155370ad0b11
Disclosures
2
HHS OCR · State AG · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
41,889
as filed · HHS OCR CO
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vail Health Services
- Normalized
- vail health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- COHHS OCRas victim2022-05-04
Vail Health Services (CO) reported to HHS on 2022-05-04 a Hacking/IT Incident affecting 41,889 individuals. Multiple employees were victims of an email phishing attack exposing PHI including names, dates of birth, addresses, diagnoses, passport numbers, health insurance information, drivers' license numbers, Social Security numbers, and clinical information. Breached information located on Email and Network Server. The CE retrained staff on email security and implemented additional technical safeguards. OCR provided technical assistance regarding HIPAA Privacy and Security Rule obligations.
- 🦞Maine State AGas victim2022-01-18
Vail Health Services, a healthcare organization, reported an external system breach (hacking) that occurred on December 11, 2021, and was discovered on December 13, 2021. The breach affected 5 Maine residents, compromising their names and Social Security Numbers. Affected individuals were notified in writing on January 14, 2022, and offered identity theft and credit monitoring services through Experian.