VAHHS OCRFirst filing
Filed Nov 6, 2024bd_1b153ce244a9ea7e
Universal Health Corporation (VA) reported to HHS OCR on 2024-11-06 a Hacking/IT Incident affecting 583 individuals. An employee was subject to an email phishing scheme that exposed PHI including names, dates of birth, addresses, claims and financial information, diagnoses, lab results, medications, Social Security numbers, and driver's license numbers. Breached information was located in Email. The CE notified HHS, individuals, and the media, posted substitute notice, implemented additional safeguards, and retrained staff on email security.
Affected (this filing): 583
HHS notified