GAHHS OCRFirst filing
Filed May 26, 2017bd_eb79092ade2c98ae
On September 7, 2016, a cyber-attacker sent a phishing email to Augusta University Medical Center, Inc. (GA) and obtained employee usernames and passwords. The attacker accessed a self-service portal to redirect employee paychecks. PHI of 4,690 individuals was exposed, including addresses, dates of birth, medical record numbers, insurance, prescription and treatment information, and, for some, Social Security numbers. HHS breach submission filed 2017-05-26; 5,600 individuals listed as affected. Breached information located in Email.
Affected (this filing): 5,600
HHS notified