Health Alliance Plan (MI, Health Plan) reported to HHS on 2018-07-05 a Hacking/IT Incident affecting 2,814 individuals. An employee was the victim of an email phishing attack. PHI exposed included names, addresses, dates of birth, Social Security numbers, diagnoses/conditions, medications prescribed, and lab results. Breached information located on Desktop Computer and Email. OCR investigated; CE conducted additional HIPAA training and implemented administrative and technical safeguards. No business associate involved.
Affected (this filing): 2,814