Catholic Health System (NY) reported to HHS on 2022-06-29 a Hacking/IT Incident (email phishing attack) affecting 904 individuals via its business associate. PHI involved included names, dates of birth, medical record numbers, and other treatment information. The BA notified affected individuals; the CE notified HHS, provided media notice, and posted substitute notice on its website. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.
Affected (this filing): 904