Confidio, LLC, a Maryland-based business associate, reported to HHS on 2020-03-31 a Hacking/IT Incident (email phishing) affecting 14,016 individuals. Several employees were victims of an email phishing scheme exposing ePHI including names, dates of birth, addresses, Social Security numbers, clinical information, and other treatment information. The BA notified HHS, affected individuals, and the media, and provided credit monitoring. Mitigation included new administrative and technical safeguards and workforce retraining. Breached information was located on Email.
Affected (this filing): 14,016