DJO, LLC (CA) reported to HHS on 2020-10-16 that an employee of its former business associate was the victim of an email phishing attack affecting the ePHI of 3,429 individuals. Breached information was located in Email. Exposed data included names, Social Security numbers, dates of birth, addresses, health insurance information, and medical diagnoses and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 3,429