Center for Alternative Sentencing and Employment Services (NY healthcare provider) reported a breach to HHS on 2021-01-15 after employees were targeted by an email phishing attack. PHI of 3,994 individuals was compromised, including names, DOBs, SSNs, driver's license numbers, passport numbers, financial and health insurance information, diagnoses, medications, and other treatment information. The CE notified HHS, individuals, and media; posted substitute web notice; offered one year of identity monitoring; deployed additional technical safeguards; and retrained its workforce on email security.
Affected (this filing): 3,994