Colorado Retina Associates, P.C. (CO) reported to HHS OCR on 2021-03-12 a Hacking/IT Incident (email phishing) affecting 26,609 individuals. An employee was the victim of a phishing attack that compromised PHI including names, addresses, dates of birth, driver's license numbers, SSNs, claims/financial information, diagnoses, lab results, and medications. Breached information located on Email. The CE notified HHS, affected individuals, and media, and implemented additional technical and administrative safeguards. OCR provided HIPAA Security Rule technical assistance.
Affected (this filing): 26,609