Upstream RollCo, LLC (AL healthcare provider) reported to HHS OCR that multiple employees were targets of an email phishing incident that compromised PHI of 748,678 individuals. Affected data included names, dates of birth, Social Security Numbers, addresses, claims information, diagnoses, and other treatment information. The entity notified HHS, affected individuals, the media, and posted substitute notice on its website, and implemented additional administrative, technical, and security safeguards.
Affected (this filing): 748,678