Ivy Rehab Network, Inc. and its affiliated companies reported to HHS on 2019-11-26 a Hacking/IT Incident (email phishing attack) affecting 125,000 individuals. Multiple employees were victims of a phishing attack exposing ePHI including names, addresses, dates of birth, financial information, and Social Security numbers via Email. The CE notified HHS, affected individuals, and the media, and responded by strengthening administrative and technical safeguards and retraining all workforce members on identifying fraudulent email communications.
Affected (this filing): 125,000