Cancer Treatment Centers of America (CTCA) at Southeastern Regional Medical Center (GA) reported to HHS OCR on 2019-07-12 a Hacking/IT Incident affecting 4,559 individuals. Several employees were victims of an email phishing scheme, exposing ePHI including names, phone numbers, addresses, dates of birth, health insurance information, and clinical information stored in email. The CE implemented additional technical safeguards, retrained staff on phishing recognition, and OCR obtained assurances of corrective action.
Affected (this filing): 4,559