Broome County, New York reported to HHS on 2019-05-31 a Hacking/IT Incident (email phishing attack) affecting 7,048 individuals. Multiple employees were victims of a phishing attack that compromised ePHI stored in email. Exposed data included names, Social Security numbers, financial information, dates of birth, medical record numbers, patient IDs, diagnoses, treatment information, and health insurance/claims data. The CE notified HHS, affected individuals, and media, provided credit monitoring, strengthened technical safeguards, and retrained staff on email security. No business associate was involved.
Affected (this filing): 7,048