Salinas Valley Memorial Healthcare System

Salinas Valley Memorial Healthcare System (SVMHS) experienced a cyber incident where five email accounts (one employee, one contractor, three employees) were compromised via Outlook Web Access. The breach was discovered on April 30, 2020, with the occurrence date listed as April 29, 2020. Affected data included PHI such as names, medical record numbers, service locations, and attending physician information. SVMHS disabled access, reset passwords, implemented MFA, and offered one year of Experian IdentityWorks. No evidence suggests data was viewed or copied.

Salinas Valley Memorial Healthcare System (SVMHS) experienced unauthorized access to email accounts of one employee and a contractor plus three other employees via Outlook Web Access between April and May 2020. The compromised inboxes may have contained patient names, hospital/medical record numbers, service location, and attending physician information. SVMHS disabled accounts, reset passwords, and implemented two-factor authentication. HHS OCR, California AG, and California DPH were notified.