Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center (GA) reported to HHS OCR on 2019-05-10 a Hacking/IT Incident affecting 16,819 individuals. Several employees were victims of an email phishing scheme that compromised ePHI including names, Social Security numbers, addresses, dates of birth, financial information, health insurance information, and clinical information. Breached information was located in Email. The CE notified HHS, affected individuals, and the media, and implemented additional technical safeguards and employee retraining. OCR obtained corrective action assurances.
Affected (this filing): 16,819