GAHHS OCRFirst filing
Filed Sep 15, 2017bd_dd621997de15eda9
AU Medical Center, Inc. (GA, healthcare provider) reported to HHS OCR on 2017-09-15 that multiple employees were victims of an email phishing attack, exposing ePHI of 6,109 individuals. Compromised data included names, addresses, dates of birth, SSNs, financial information, driver's license numbers, medical record numbers, health insurance and prescription information, and diagnoses/treatment information. The covered entity notified HHS, affected individuals, the media, and provided substitute notice on its website. Remediation included additional administrative and technical safeguards and employee retraining on email security.
Affected (this filing): 6,109
HHS notified