Central California Alliance for Health

Central California Alliance for Health (CA Health Plan) reported to HHS on 2020-07-02 a Hacking/IT Incident affecting 35,940 individuals. Several employees fell victim to an email phishing scheme that compromised ePHI including names, addresses, dates of birth, claims information, diagnoses, lab results, and medications. Breached information located in Email. The CE notified HHS, affected individuals, and media, and implemented additional safeguards and employee retraining. OCR provided technical assistance on the HIPAA Security Rule.

Affected (this filing): 35,940

Central California Alliance for Health reported that on May 7, 2020, an unknown person illegally accessed employee email accounts for approximately one hour. Limited member health information, including care management records, claims info, dates of birth, demographic data, Medi-Cal IDs, and medical/referral information, may have been accessed. The organization shut down affected accounts, reset passwords, and mandated security training. No financial information or SSNs were involved.