UnityPoint Health

Iowa Health System d/b/a UnityPoint Health reported to HHS on 2018-07-30 a Hacking/IT Incident affecting 1,421,107 individuals. Breached information located on Email. Employees were subjects of an email phishing scheme compromising PHI including names, DOB, SSN, driver's license, claims, financial info, diagnoses, lab results, and medications. The CE implemented additional safeguards and retrained staff.

Affected (this filing): 1,421,107

UnityPoint reported a data breach to the Montana Attorney General. The breach was reported on 2018-07-30. The breach occurred from 3/14/2018 to 4/3/2018. 144 Montana residents were affected.

Affected (this filing): 144

California AG breach notification for UnityPoint Health regarding a phishing attack on business email systems between March 14 and April 3, 2018, discovered May 31, 2018. Attackers obtained credentials via phishing emails, accessing accounts containing patient PHI and PII (SSN, DOB, financial data). No known misuse reported. Remediation included password resets, MFA, employee training, and free credit monitoring.