Fillmore County Hospital (Geneva, NE) reported to HHS OCR on 2025-02-13 a Hacking/IT Incident affecting 3,535 individuals. An employee was targeted by an email phishing scheme, compromising PHI stored in email — including names, addresses, dates of birth, Social Security numbers, claims, financial information, and treatment information. The CE notified HHS, affected individuals, and the media. Mitigation included revised policies, enhanced security awareness training, and improved threat protections. OCR provided technical assistance.
Affected (this filing): 3,535