Pershing Health System (Missouri) reported to HHS OCR on 2023-01-05 an email phishing incident affecting 5,368 individuals. Several employees were subjects of the phishing attack, compromising PHI stored in email. Exposed data included names, addresses, dates of birth, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, and media; offered free credit monitoring; implemented additional administrative, technical, and security safeguards; and retrained staff on email security.
Affected (this filing): 5,368