EVERSANA (WI, Healthcare Provider) reported to HHS on 2020-04-07 a Hacking/IT Incident — email phishing scheme — affecting 29,631 individuals (HHS portal count: 5,000). Breached ePHI located in Email included names, addresses, birthdates, drivers' license info, SSNs, treatment info, financial info, claims data, diagnoses/conditions, and medications prescribed. CE notified HHS, individuals, and media; provided credit monitoring; issued substitute notice; and implemented additional safeguards plus staff retraining. OCR obtained corrective-action assurances.
Affected (this filing): 5,000