Tufts Health Plan (MA, Health Plan) reported to HHS on 2020-11-25 a Hacking/IT Incident affecting 60,545 individuals. A business associate employee was the victim of an email phishing attack. PHI involved included names, addresses, Social Security numbers, dates of birth, and treatment and health insurance information. Breached information located in Email. CE notified HHS, affected individuals, and media, and posted substitute notice on its website. OCR provided technical assistance on breach reporting requirements.
Affected (this filing): 60,545