Central California Alliance for Health

Central California Alliance for Health notified members that on May 7, 2020, employee email accounts were accessed illegally by an unknown person for approximately one hour. The incident may have exposed member health information including care management records, claims information, dates of birth, demographic information, Medi-Cal ID numbers, medical information, and referral information. Financial information and SSNs were not included. A revised supplemental notice was issued in January 2021 after additional impacted individuals were identified.

Central California Alliance for Health (CA Health Plan) reported to HHS on 2020-07-02 a Hacking/IT Incident affecting 35,940 individuals. Several employees fell victim to an email phishing scheme that compromised ePHI including names, addresses, dates of birth, claims information, diagnoses, lab results, and medications. Breached information located in Email. The CE notified HHS, affected individuals, and media, and implemented additional safeguards and employee retraining. OCR provided technical assistance on the HIPAA Security Rule.

Central California Alliance for Health reported that on May 7, 2020, an unknown person illegally accessed employee email accounts for approximately one hour. Limited member health information, including care management records, claims info, dates of birth, demographic data, Medi-Cal IDs, and medical/referral information, may have been accessed. The organization shut down affected accounts, reset passwords, and mandated security training. No financial information or SSNs were involved.