Endo Group, LLC (NY Healthcare Provider) reported to HHS on 2025-01-27 a Hacking/IT Incident affecting 4,498 individuals via an email phishing scheme targeting multiple employees. PHI exposed included names, Social Security numbers, addresses, drivers' license numbers, dates of birth, financial and claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, provided credit monitoring, retrained staff, and implemented additional administrative, technical, and security safeguards.
Affected (this filing): 4,498