KYHHS OCRFirst filing
Filed Dec 28, 2012bd_72cdf701cffd4cbe
HP Enterprise Services (Business Associate, KY) reported to HHS on 2012-12-28 a Theft affecting 1,090 individuals. An employee of a subcontractor responded to a telephone phishing (vishing) attack and permitted a hacker to remotely access the subcontractor's laptop, which improperly stored PHI including names, dates of birth, diagnosis codes, SSNs, and treatment descriptions. The subcontractor terminated the responsible employee, initiated laptop PHI audits, and retrained staff. OCR obtained assurances that corrective actions were completed. Breached information located on Laptop.
Affected (this filing): 1,090
HHS notified