Progressions Behavioral Health Services, Inc.

Progressions Behavioral Health Services, Inc. (PA) reported to HHS on 2018-06-25 a Hacking/IT Incident affecting 1,303 individuals, with breached information located in Email. An unauthorized external user gained access to employee email accounts via a phishing attack, then configured automatic email forwarding to an external account, exfiltrating PHI including clinical information. The CE notified HHS, affected individuals, and media. Post-breach remediation included MFA deployment and new security training. OCR required completion of a risk analysis.

Affected (this filing): 1,303