The Centers for Advanced Orthopaedics (MD) reported to HHS OCR on 2021-03-25 a Hacking/IT Incident affecting 125,291 individuals. Multiple employees were victims of an email phishing scheme that exposed PHI including names, dates of birth, Social Security numbers, drivers' license numbers, passport numbers, diagnoses, and financial and other treatment information. Breached information located in Email. The CE notified HHS, affected individuals, and media, implemented additional safeguards, and retrained staff on identifying fraudulent emails. No business associate was involved.
Affected (this filing): 125,291