UCare Minnesota, a Minnesota-based health plan, reported to HHS on 2020-09-18 that numerous employees fell victim to an email phishing scheme affecting the ePHI of 4,806 individuals. Breached information (located in Email) included names, addresses, birthdates, claims and financial information, medications prescribed, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and media, and implemented additional safeguards and a fraud claims review process. OCR provided technical assistance on Security Rule and Breach Notification Rule compliance.
Affected (this filing): 4,806