Minnesota Department of Human Services (MN, Health Plan) reported to HHS on 2018-10-09 a Hacking/IT Incident affecting 20,800 individuals. Several employees were victims of a series of email phishing schemes. PHI involved included names, dates of birth, addresses, Social Security numbers, medications prescribed, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media, and subsequently implemented additional security safeguards and retrained staff. OCR obtained assurances of corrective actions. Breached information located on Email.
Affected (this filing): 20,800