KYHHS OCRFirst filing
Filed Aug 21, 2020bd_df11bd77093eb7d0
HealthFirst Bluegrass (KY) reported to HHS on 2020-08-21 a Hacking/IT Incident affecting 971 individuals. An employee was the victim of an email phishing scheme that exposed ePHI including names, addresses, dates of birth, driver's license numbers, Social Security numbers, claims information, financial information, diagnoses, lab results, and medications. Breached information located in Email. The CE notified HHS, affected individuals, and media, offered credit monitoring, sanctioned the responsible employee, and implemented additional administrative and technical safeguards. OCR obtained assurances of corrective action.
Affected (this filing): 971
HHS notified