Bi-Bett Corporation

Bi-Bett Corporation, a Business Associate based in CA, reported to HHS on 2023-07-25 a Hacking/IT Incident affecting 4,639 individuals. An employee was the target of an email phishing attack that exposed PHI including names, addresses, dates of birth, driver's license numbers, Social Security numbers, and health insurance information. Breached information was located on Email. The BA notified HHS, affected individuals, the media, and provided substitute notice. Free credit monitoring was offered and additional administrative, technical, and security safeguards were implemented. OCR provided technical assistance regarding HIPAA Rules.

Affected (this filing): 4,639

Bi-Bett Corporation detected unusual activity in a single email account on February 17, 2023. The account was compromised by an unauthorized actor, potentially exposing personal and protected health information including names, addresses, Social Security Numbers, driver's license numbers, Medicaid numbers, and medical reference numbers. The company secured the account, engaged a third-party cybersecurity firm, changed credentials, and enhanced security measures. Affected individuals are offered 12 months of credit monitoring and fraud assistance.