Phoenix Children's Hospital (AZ) reported to HHS OCR on 2020-01-14 a Hacking/IT Incident (email phishing scheme) affecting 1,860 individuals. Several employees were victims of a phishing attack exposing ePHI stored in email, including names, dates of birth, addresses, drivers' license information, diagnoses, lab results, medications prescribed, and other treatment information. OCR investigated; the CE revised HIPAA security procedures, retrained staff, and implemented additional technical safeguards.
Affected (this filing): 1,860