June E. Nylen Cancer Center (Iowa) reported to HHS OCR on 2019-09-11 a Hacking/IT Incident affecting 927 individuals. An employee was the victim of an email phishing attack, exposing PHI including names, addresses, dates of birth, diagnoses, and other treatment information. Breached information was located in Email. The CE notified HHS, affected individuals, and media, posted substitute notice on its website, hired a third-party investigator, and provided additional HIPAA training to staff.
Affected (this filing): 927