Montrose Behavioral Health Hospital, Inc. (IL) reported to HHS OCR on 2023-11-24 a Hacking/IT Incident affecting 597 individuals. An employee was the subject of an email phishing scheme exposing PHI stored in Email systems. PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, and health insurance/treatment information. The CE notified HHS, affected individuals, and media, provided credit monitoring, and retrained staff on email security.
Affected (this filing): 597