Hanger Prosthetics & Orthotics (dba Hanger Clinic) reported a HIPAA breach after an employee of its business associate was the subject of an email phishing attack that compromised PHI of 1,354 individuals. Exposed data included names, addresses, dates of birth, SSNs, driver's license numbers, claims information, diagnoses, and other treatment information. Hanger notified HHS, affected individuals, and the media, implemented new technical safeguards, and retrained its workforce on email security.
Affected (this filing): 1,354