Kentuckiana Regional Planning and Development Agency

Kentuckiana Regional Planning and Development Agency (KY) reported to HHS on 2020-06-05 a Hacking/IT Incident affecting 3,663 individuals. Several employees were victims of an email phishing scheme exposing ePHI on Desktop Computer and Email systems. Compromised data included names, dates of birth, Social Security numbers, physical addresses, drivers' license numbers, diagnoses, health insurance information, and claims/financial information. The CE notified HHS, affected individuals, and the media, and implemented additional safeguards and HIPAA retraining for all workforce members.