Burrell Behavioral Health reported to HHS on 2019-03-29 a Hacking/IT Incident affecting 67,493 individuals. Breached information located on Network Server. A business associate failed to secure a web portal containing PHI (names, addresses, DOB, SSN, clinical info). The portal lacked authentication and auditing. BBH removed access, investigated, notified individuals and OCR, offered identity monitoring, and terminated the BA relationship.
Affected (this filing): 67,493