JASACare reported to HHS on March 14, 2016, a hacking incident that affected 1,154 patients. Unauthorized individuals gained access to a workforce member's email account, exposing electronic protected health information (ePHI) including names, addresses, Social Security numbers, and insurance details. The breach was located within the email system. In response, JASACare secured the compromised account, notified affected individuals, and offered one year of free credit monitoring. Following an investigation with OCR's technical assistance, the entity implemented new security policies and procedures for handling ePHI.
Affected (this filing): 1,154