Saint Alphonsus Health System

Saint Alphonsus Health System (ID) reported to HHS on 2021-03-04 a Hacking/IT Incident (email phishing) affecting 134,906 individuals. An employee was the victim of a phishing scheme exposing ePHI including names, addresses, dates of birth, SSNs, health insurance, claims and financial information, lab results, and medications. Breached information located in Email systems. No business associate was involved. OCR provided technical assistance; the CE retrained staff and implemented additional safeguards.

Affected (this filing): 134,906

Saint Alphonsus Health System reported a phishing incident affecting employee email accounts between January 4 and January 6, 2021. Unauthorized access may have exposed patient data including names, addresses, dates of birth, and medical records. The company secured the account, retrained staff, and engaged Kroll to provide one year of free identity monitoring services to affected individuals.

Saint Alphonsus Health System reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-04. The breach occurred during 1/4/2021 - 1/6/2021. The breach was discovered on 1/6/2021. 134,906 individuals were affected. Notice was sent on 3/4/2021.

Affected (this filing): 134,906