Catawba Valley Medical Center (NC) reported to HHS on 2018-10-12 a Hacking/IT Incident (phishing) affecting 20,000 individuals (22,952 per investigation). In August 2018, an unauthorized person accessed email accounts of three employees via phishing. PHI compromised included demographic and health insurance information. Breached information located on Email. Remediation included MFA, password resets, enhanced monitoring, staff training, and a suspicious-email reporting plugin. OCR provided technical assistance and obtained corrective-action assurances.
Affected (this filing): 20,000