Keck Medicine of USC

On September 30, 2022, Keck Medicine of USC discovered unauthorized access to a provider's work email account. The incident involved potential exposure of protected health information and basic identity data. Keck secured the account, engaged forensic investigators, and is offering identity protection services to affected individuals. No financial account information or Social Security numbers were involved.

Keck Medicine of USC notified Montana residents of a data security incident on December 15, 2022. On September 30, 2022, unauthorized access to a provider's email account was discovered, likely via phishing. The incident involved personal and protected health information. No SSN, driver's license, or financial account data was found in the account. Keck engaged forensic investigators and offered 12 months of identity protection services.

Keck Medicine of USC reported to HHS on 2022-11-29 a Hacking/IT Incident (email phishing) affecting 2,200 individuals. An employee was the subject of an email phishing scheme that compromised PHI including names, addresses, dates of birth, Social Security numbers, health insurance information, diagnoses, medications, lab results, and other treatment information. Breached information located on Email. The CE notified affected individuals, the media, and provided substitute notice, credit monitoring, and retrained staff on email security.

Conifer Revenue Cycle Solutions, LLC notified Keck Medicine of USC patients of a data breach where an unauthorized party accessed a business email account between Jan 20 and Apr 14, 2022. Data potentially included PII, PHI, and billing info. No SSN or financial account numbers were involved.

Keck Medicine of USC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-30. 74 Massachusetts residents were affected. The report records the breach type as electronic.

An unauthorized third party accessed a Microsoft Office 365 business email account at Conifer Revenue Cycle Solutions, a vendor for Keck Medicine of USC. Access occurred on Jan 20, 2022, and was discovered on Apr 14, 2022. Affected data may include PHI, PII, SSNs, and financial info for Keck patients. Conifer engaged forensics, reset credentials, and implemented MFA.