Administrative Advantage, LLC (a Business Associate, GA) reported to HHS on 2021-04-05 a Hacking/IT Incident affecting 4,852 individuals via an email phishing scheme. Several employees were victims of phishing, exposing ePHI including names, dates of birth, Social Security numbers, financial information, driver's license/state ID numbers, health insurance information, lab results, and other treatment information. The BA notified HHS, affected individuals, and the media, provided substitute notice, and offered complimentary credit monitoring. Mitigation included additional safeguards and workforce retraining on email security.
Affected (this filing): 4,852