Baystate Health (MA) reported to HHS OCR on 2019-04-05 a Hacking/IT Incident affecting 11,658 individuals. Several employees were victims of an email phishing scheme that compromised ePHI including names, addresses, dates of birth, Social Security numbers, health insurance information, treatment information, and financial information. Breached information was located in Email. The CE notified HHS, individuals, and media; provided credit monitoring; and implemented additional safeguards and staff training. OCR obtained assurances of corrective actions.
Affected (this filing): 11,658