NEW YORKHHS OCRFirst filing
Filed Aug 5, 2017bd_13fe1fe739542594
Elderplan, Inc. (NY-based health plan) reported that several employees fell victim to an email phishing scheme, exposing ePHI of 65,235 individuals. Affected data included names, health insurance information, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media; implemented additional administrative, technical, and security safeguards; and retrained workforce on identifying phishing emails. OCR obtained assurances of corrective actions.
Affected (this filing): 65,235
HHS notified