DCHHS OCRFirst filing
Filed Feb 24, 2015bd_6aee8ee7dcf1cd2f
Children's National Medical Center (DC) reported to HHS on 2015-02-24 a Hacking/IT Incident affecting 18,000 individuals (described as over 20,000 in the narrative). Employees responded to phishing emails, enabling unauthorized access via compromised credentials. Breached information — located in Email systems — included demographic, clinical, and health insurance data, and a limited number of Social Security numbers. Exfiltration software was deployed by the attacker. The CE remediated accounts, removed exfil tools, enhanced firewall/email controls, retrained staff, and offered 12 months of free identity monitoring for SSN-affected individuals. OCR obtained assurances of corrective action completion.
Affected (this filing): 18,000
HHS notified