Compass Behavioral Health (KS) reported to HHS on 2023-02-10 a Hacking/IT Incident affecting 537 individuals. Several employees were targets of an email phishing attack that compromised PHI including names, addresses, dates of birth, and diagnoses/conditions. Breached information was located in Email. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Additional security safeguards were implemented and workforce members were retrained. OCR provided technical assistance.
Affected (this filing): 537