ST. JOSEPH HEALTH SYSTEM

St. Joseph Health System notified California AG in 2014 regarding a December 2013 security attack where hackers gained unauthorized access to a server. The breach potentially exposed patient and employee names and addresses. The system was shut down on Dec 18, 2013. Forensic experts and the FBI were engaged. No misuse of information was reported. Identity protection services were offered.

St Joseph Health System reported to HHS on 2014-02-05 a Hacking/IT Incident affecting 405,000 individuals. Breached information located on Network Server. The server was hacked during a power surge, exposing ePHI including names, DOB, SSN, medical info, bank account info, and addresses. The CE provided breach notification to HHS, affected individuals, and the media, and improved administrative and technical security.

Affected (this filing): 405,000