ILHHS OCRFirst filing
Filed Dec 8, 2016bd_44183e830b268ebd
Black Hawk College (Health Plan, IL) reported to HHS on 2016-12-08 a Hacking/IT Incident affecting approximately 1,000 individuals. A computer server belonging to the CE's reinsurer was infected with ransomware from March 12 to August 8, 2016, exposing PHI including names, addresses, dates of birth, Social Security numbers, and clinical data. The CE filed out of caution; the reinsurer was not a BA. Breached information was located on a Network Server. OCR confirmed CE implemented remediation including staff retraining and policy review.
Affected (this filing): 1,000
HHS notified