The Medical College of Wisconsin, Inc. reported to HHS on 2017-11-17 a Hacking/IT Incident affecting 9,500 individuals. Several employees were victims of an email phishing attack; compromised email accounts contained PHI including names, dates of birth, addresses, Social Security numbers, medical record numbers, health insurance information, financial information, and treatment information. Breached information was located in Email. The CE implemented administrative and technical safeguards, retrained staff, and notified HHS, individuals, and media. OCR obtained corrective-action assurances.
Affected (this filing):