UMass Memorial Health Care Master Pension Trust

UMass Memorial Health reported a phishing incident that occurred between June 24, 2020, and January 7, 2021. The breach was discovered on August 25, 2021. The incident compromised names and financial account numbers or credit/debit card numbers with their access codes. In response, the company offered one year of credit monitoring and identity theft protection services through Experian to the 3 affected Maine residents.

Affected (this filing): 3

UMass Memorial Health Care, Inc. reported to HHS on 2021-10-15 a Hacking/IT Incident affecting 209,048 individuals. Breached information located on Email. An employee was the subject of an email phishing scheme affecting PHI including names, dates of birth, and Social Security numbers.

Affected (this filing): 209,048

UMass Memorial Health notified the New Hampshire Attorney General of a phishing incident affecting employee email accounts. Unauthorized access occurred between June 24, 2020, and January 7, 2021. On August 25, 2021, the organization identified 17 New Hampshire residents whose PII (SSN, driver's license, financial account info) was contained in compromised emails. Total individuals notified under HIPAA was 1,370. Notifications began October 15, 2021, offering one year of credit monitoring.

Affected (this filing): 1,370