Hill Country Memorial Hospital (TX) reported to HHS on 2017-04-21 a Hacking/IT Incident affecting 8,449 individuals. On February 21, 2017, a workforce member responded to a phishing email and provided credentials, enabling an unknown external actor to access her email account and send fraudulent invoices. Breached PHI on Email servers may have included names, addresses, dates of birth, Social Security numbers, and medical information. The CE notified HHS, affected individuals, and media, and implemented security awareness training and email controls. OCR obtained assurances of corrective action.
Affected (this filing): 8,449