Central Minnesota Mental Health Center (a Minnesota healthcare provider) reported to HHS OCR on 2022-03-17 that an email phishing scheme targeting multiple employees compromised protected health information of 28,725 individuals. PHI involved included names, dates of birth, addresses, Social Security numbers, claims information, diagnoses/conditions, lab results, and medications. The CE notified HHS, affected individuals, and the media, and implemented administrative and technical safeguards. No business associate was reported as involved.
Affected (this filing): 28,725