Merritt Healthcare Advisors

Merritt Healthcare Advisors reported to HHS on 2023-03-15 a Hacking/IT Incident affecting 88740 individuals. Breached information located on Email. An employee was the victim of an email phishing scheme affecting the protected health information (PHI) of 88,740 individuals. Upon investigation, it was determined that the entity is not a covered entity or business associate; OCR closed the matter.

Merritt Healthcare Advisors reported that an unauthorized actor accessed an employee's email account between July 30, 2022, and August 25, 2022. The incident involved personal information including names and potentially medical information. The company secured the account, engaged external cybersecurity professionals, and notified affected individuals and data owners. No evidence of misuse was found.

Merritt Healthcare Advisors notified the NH Attorney General of a data security incident involving unauthorized access to an employee's email account. Access occurred between July 30 and August 25, 2022. Discovery was made on November 30, 2022. One NH resident's PII (name, SSN) was exposed. No evidence of misuse. Notification sent March 14, 2023.

Affected (this filing): 1