KYHHS OCRFirst filing
Filed Nov 21, 2017bd_9ee662f8a4a11045
Baptist Health Louisville (KY) reported to HHS OCR on 2017-11-21 a Hacking/IT Incident (phishing) affecting 880 individuals. Two employees fell victim to phishing on separate days, exposing PHI including names, dates of birth, addresses, Social Security numbers, and clinical information. Breached information was located in Email. The CE retrained employees on identifying/reporting phishing emails. OCR reviewed HIPAA policies and obtained assurances of corrective action.
Affected (this filing): 880
HHS notified