MNHHS OCRFirst filing
Filed Mar 16, 2020bd_adb18ed9af782430
Lakewood Health System (MN) reported to HHS OCR on 2020-03-16 a Hacking/IT Incident (email phishing) affecting 1,415 individuals. An employee was victimized by a phishing attack exposing ePHI stored in email, including names, SSNs, addresses, dates of birth, driver's license info, diagnoses, medications, and health insurance information. No business associate was involved. OCR obtained corrective-action assurances; the CE sanctioned the responsible employee and enhanced safeguards.
Affected (this filing): 1,415
HHS notified