ARHHS OCRFirst filing
Filed Aug 23, 2019bd_23ba11895793aa5e
Conway Regional Health System (Conway, AR) reported to HHS OCR on 2019-08-23 a Hacking/IT Incident affecting approximately 37,000 individuals via an email phishing scheme. Exposed ePHI included names, addresses, medications prescribed, health insurance information, and Social Security numbers. The CE notified HHS, affected individuals, and the media, and offered complimentary credit monitoring. OCR obtained assurances that corrective actions — including improved email technical safeguards — were implemented.
Affected (this filing): 37,000
HHS notified