INDIANAHHS OCRFirst filing
Filed Mar 5, 2015bd_05b7228841867ac2
St. Mary's Health (Indiana) reported to HHS on 2015-03-05 a Hacking/IT Incident affecting 3,952 individuals. On December 3, 2014, a phishing email attack compromised several employees' usernames and passwords. Exposed PHI included patient names, addresses, dates of birth, clinical information, and in some cases, Social Security numbers. Breached information was located in Email systems. OCR obtained documented assurances of corrective action, including deployment of a phishing/malware awareness program.
Affected (this filing): 3,952
HHS notified