Sunrise Community Health

Sunrise Community Health (a Colorado healthcare provider) reported to HHS OCR on 2019-12-05 that several employees fell victim to an email phishing scheme, compromising ePHI of 18,404 individuals. Affected data included names, dates of birth, diagnoses, medications prescribed, and other treatment information. The entity notified HHS, affected individuals, the media, and provided substitute notice. Remediation included additional administrative, technical, and security safeguards plus workforce retraining on email security. OCR provided technical assistance on HIPAA Security Rule obligations.

Affected (this filing): 18,404

Sunrise Community Health reported a data breach to the Montana Attorney General. The breach was reported on 2019-12-05. The breach occurred from 9/11/2019 to 11/22/2019. 1 Montana residents were affected.

Affected (this filing): 1