Keck Medicine of USC

Conifer Revenue Cycle Solutions, LLC, a business associate of Keck Medicine of USC, reported a data breach involving unauthorized access to a Microsoft Office 365 business email account. The unauthorized access occurred between January 20, 2022, and April 14, 2022. The incident potentially exposed patient personal information, including names, dates of birth, addresses, Social Security numbers, driver's license numbers, financial account information, and medical/treatment records. Conifer engaged a security firm, reset passwords, blocked malicious IPs, and accelerated multi-factor authentication. IDX provided credit monitoring and identity theft protection services to affected individuals.

Keck Medicine of USC reported to HHS on 2022-11-29 a Hacking/IT Incident (email phishing) affecting 2,200 individuals. An employee was the subject of an email phishing scheme that compromised PHI including names, addresses, dates of birth, Social Security numbers, health insurance information, diagnoses, medications, lab results, and other treatment information. Breached information located on Email. The CE notified affected individuals, the media, and provided substitute notice, credit monitoring, and retrained staff on email security.

Affected (this filing): 2,200