Colorado Physician Partners, PLLC (a Colorado healthcare provider) reported to HHS OCR on 2022-03-25 that an employee fell victim to an email phishing attack, exposing PHI of 12,877 individuals. Affected data included names, Social Security numbers, dates of birth, addresses, diagnoses, prescribed medications, and financial/treatment information. The entity notified HHS, affected individuals, and the media, provided substitute notice and complimentary credit monitoring, implemented additional administrative and technical safeguards, and retrained staff on email security. OCR provided technical assistance on the HIPAA Security Rule.
Affected (this filing): 12,877