Capitol Administrators, Inc

Capitol Administrators, Inc. (a Business Associate in CA) reported to HHS on 2018-05-11 a Hacking/IT Incident affecting 1,733 individuals. An external third party accessed employees' email accounts via a suspected phishing incident, compromising demographic and clinical PHI. The BA notified client health plans, HHS, affected individuals, and media, and offered free credit monitoring. Remediation included password changes, MFA implementation, blocking foreign IP addresses, and enhanced phishing training. Breached information located on Email.

Affected (this filing): 1,733

Capitol Administrators, Inc. notified the California Attorney General's Office of a phishing incident occurring between January 7 and January 24, 2018. An unauthorized individual accessed emails and attachments containing plan participants' names and personal/medical data. Capitol engaged forensic investigators, secured accounts, implemented MFA, and provided one year of Kroll identity monitoring to affected individuals.