INDIANAHHS OCRFirst filing
Filed Dec 17, 2024bd_d51f07fae3d383b2
Indiana University Health, Affiliated Covered Entity (IN) reported to HHS on 2024-12-17 a Hacking/IT Incident (email phishing) affecting 19,827 individuals. An employee was targeted by a phishing scheme that compromised PHI including names, dates of birth, addresses, Social Security and driver's license numbers, diagnoses/conditions, and other treatment information. Breached information located in Email. The CE provided security awareness training and enhanced access controls and email security. OCR provided technical assistance regarding the HIPAA Rules. No business associate was involved.
Affected (this filing): 19,827
HHS notified