Saint Agnes Health Care, Inc.

Saint Agnes Health Care, Inc. (MD) reported to HHS OCR on 2015-04-24 a Hacking/IT Incident affecting 24,967 individuals. An unauthorized user gained access to employee email accounts via a phishing attack. Breached PHI included demographic, financial, and clinical information. The CE notified HHS, affected individuals, and media. Post-breach, the CE conducted additional phishing-awareness training and implemented additional email safeguards. OCR reviewed the CE's risk analysis and risk management plan.

Affected (this filing): 24,967