Gold Coast Health Plan

Gold Coast Health Plan reported to HHS OCR on October 5, 2018 a Hacking/IT Incident (phishing) affecting 37,005 individuals. Phishing attacks compromised workforce members' email accounts. PHI exposed included names, dates of birth, Medi-Cal numbers, health plan names, claims information, diagnoses/conditions, and other treatment information. Breached information located in Email.

Affected (this filing): 37,005

Gold Coast Health Plan experienced a phishing attack between June 18 and August 1, 2018, compromising an employee email account. The incident exposed members' protected health information, including health plan IDs, dates of service, names, dates of birth, and medical procedure codes. The breach was discovered on August 8, 2018. GCHP engaged a cybersecurity firm, notified law enforcement, and offered 12 months of identity theft protection services to affected members.