UC San Diego Health

UC San Diego Health Hillcrest-Hillcrest Medical Center reported that several employees were targeted by an email phishing scheme, compromising PHI of 1,642 individuals. Affected data included names, addresses, email addresses, DOBs, medical record numbers, health insurance information, treatment cost information, and clinical information. The entity notified HHS, affected individuals, and the media, provided credit monitoring, and implemented additional safeguards.

Affected (this filing): 1,642

UC San Diego Health experienced a phishing attack on January 9, 2024, resulting in unauthorized access to two employee email accounts between January 9 and January 22, 2024. The breach exposed patient information including names, Social Security numbers, medical record numbers, and clinical data. The organization secured the accounts, enhanced security controls, and offered identity theft protection services to affected individuals.