Healthcare Resource Group, Inc.

Healthcare Resource Group, Inc. (HRG), a billing services provider for Barlow Respiratory Hospital, notified the California Attorney General of unauthorized access to an employee's email account between November 4 and November 30, 2019. HRG discovered the incident on December 31, 2019, during an unrelated investigation. A forensic review concluded on February 27, 2020, confirming that the account contained personal and health information of patients. HRG secured the account, engaged third-party forensics, notified law enforcement, and offered 12 months of identity monitoring to affected individuals. No evidence of actual misuse was found.

Healthcare Resource Group, Inc. reported to HHS on 2020-04-07 a Hacking/IT Incident affecting 5387 individuals. Breached information located on Email. An employee was victim of an email phishing scheme affecting ePHI including names, DOB, SSN, driver's license, financial info, and treatment data.

HEALTHCARE RESOURCE GROUP filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-164). The register records the breach as discovered on December 31, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.