Saint Alphonsus Health System
ent_bd8d4e9aff79144bd1b5ab37
Disclosures
4
HHS OCR · State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
134,906
nationwide · HHS OCR ID
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Saint Alphonsus Health System
- Normalized
- saint alphonsus health system— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- IDAHOHHS OCRas victim2021-03-04
Saint Alphonsus Health System (ID) reported to HHS on 2021-03-04 a Hacking/IT Incident (email phishing) affecting 134,906 individuals. An employee was the victim of a phishing scheme exposing ePHI including names, addresses, dates of birth, SSNs, health insurance, claims and financial information, lab results, and medications. Breached information located in Email systems. No business associate was involved. OCR provided technical assistance; the CE retrained staff and implemented additional safeguards.
- California State AGas victim2021-03-04
Saint Alphonsus Health System notified patients of unauthorized access to an employee email account between January 4 and January 6, 2021. The incident potentially exposed PHI, including names, addresses, dates of birth, and medical record/treatment information. The organization secured the account and offered one year of identity monitoring.
- Oregon State AGas victim2021-03-04
Saint Alphonsus Health System reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-04. The breach occurred during 1/4/2021 - 1/6/2021. The breach was discovered on 1/6/2021. 134,906 individuals were affected. Notice was sent on 3/4/2021.
- Illinois State AGas victim2021-01-01
ST. ALPHONSUS HEALTH SYSTEM filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-115). The register records the breach as discovered on January 6, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.