Toyota Industries North America, Inc. (as plan sponsor to its Welfare Benefit Plan, IN) reported to HHS OCR on 2018-09-28 a Hacking/IT Incident affecting 19,320 individuals. Several employees were victims of an email phishing attack; compromised accounts contained PHI including names, addresses, dates of birth, driver's license info, SSNs, claims, financial info, diagnoses, medications, and treatment information. The CE suspended affected accounts, implemented additional technical safeguards, and retrained staff. OCR obtained corrective-action assurances.
Affected (this filing): 19,320