MNHHS OCRFirst filing
Filed Feb 25, 2025bd_3519b9cfe42b1c26
Bassford Remele P.A. (a business associate law firm in MN) reported to HHS OCR on 2025-02-25 a Hacking/IT Incident affecting 4,435 individuals. An employee was targeted by an email phishing scheme that compromised PHI including names, dates of birth, addresses, Social Security numbers, and diagnoses/conditions. Breached information was located on Email systems. The BA notified HHS, affected individuals, and the media, and provided security awareness training and enhanced access controls. OCR provided technical assistance.
Affected (this filing): 4,435
HHS notified