MASSACHUSETTSHHS OCRFirst filing
Filed May 1, 2015bd_b18ec7eab3dcb46d
Partners HealthCare System, Inc. reported to HHS on 2015-05-01 a Hacking/IT Incident (phishing) affecting 3,321 individuals. A phishing email sent to 392 employees led to 50 employees providing unauthorized access to their email accounts, which were hosted on a Network Server. Breached PHI included names, addresses, dates of birth, Social Security numbers, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, and subsequently implemented stronger passwords, two-factor authentication, and additional phishing awareness training. OCR obtained assurances of corrective action.
Affected (this filing): 3,321
HHS notified