Episcopal Health Services, Inc. (NY) reported to HHS on 2018-11-19 a Hacking/IT Incident (email phishing scheme) affecting 218,055 individuals. Numerous employees were victims of a phishing attack that compromised ePHI stored in email systems. Exposed data included names, dates of birth, addresses, Social Security numbers, driver's license numbers, financial information, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media, and provided free credit monitoring. New administrative and technical safeguards were implemented; OCR obtained corrective-action assurances.
Affected (this filing): 218,055