FEDERALHHS OCRFirst filing
Filed Nov 15, 2017bd_28ab4eac8a4672cd
UPMC Susquehanna reported to HHS on 2017-11-15 a Hacking/IT Incident affecting 1208 individuals. An unauthorized individual gained access to 11 staff email accounts via a phishing email, exposing protected health information including names, dates of birth, social security numbers, addresses, and clinical information. The breach location was Email. In response, the entity implemented stricter password policies and two-factor authentication.
Affected (this filing): 1,208
HHS notified