Baker Places, Inc.

Baker Places, Inc. (CA) reported to HHS OCR on 2024-08-16 a Hacking/IT Incident (email phishing) affecting 971 individuals. An employee was targeted by a phishing scheme compromising PHI stored in email. Exposed data included names, SSNs, addresses, driver's license numbers, dates of birth, financial and claims information, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, provided substitute notice, offered credit monitoring, and retrained staff on email security.

Affected (this filing): 971

Baker Places, Inc. disclosed that an unauthorized individual may have accessed an employee email account between February 12 and February 29, 2024. The incident involved suspicious activity relating to the account. Affected individuals' names and potentially other data elements were at risk. The company reset passwords, engaged third-party investigators, implemented additional safeguards, and offered credit monitoring.