Boys Town National Research Hospital (NE) reported to HHS on 2018-05-09 a Hacking/IT Incident (email phishing attack) affecting 2,182 individuals. An employee was the victim of a phishing attack, exposing PHI including names, addresses, dates of birth, Social Security numbers, email addresses, diagnoses/conditions, dates of service, and health insurance information via Email. The CE notified HHS, affected individuals, and the media; offered credit monitoring; implemented additional safeguards; trained staff; and sanctioned the responsible employee. A business associate was present. OCR obtained assurances of corrective actions.
Affected (this filing): 2,182