Chase Brexton Health Care (MD) reported to HHS OCR on 2017-10-03 a Hacking/IT Incident affecting 16,562 individuals. An unauthorized user gained access to four employees' email accounts via a phishing attack. Breached information was located in Email and included names, addresses, dates of birth, financial information, and diagnostic information. The covered entity subsequently implemented two-factor authentication and conducted employee cybersecurity training. OCR reviewed the covered entity's risk analysis for Security Rule compliance.
Affected (this filing): 16,562