Community Link, Inc. (WI), a health plan, reported to HHS OCR on 2017-06-30 a Hacking/IT Incident affecting 5,524 individuals via an email phishing scheme. A compromised email account exposed PHI including names, Social Security numbers, member identification numbers, and claims data. The CE notified HHS, affected individuals, and media, and implemented additional administrative, security, and technical safeguards, and retrained staff. OCR obtained assurances of corrective action.
Affected (this filing): 5,524