Beacon Health System (IN) reported to HHS on 2015-05-22 a Hacking/IT Incident affecting 306,789 individuals. Several employees were victims of an email phishing attack that exposed ePHI stored in email, including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and clinical information. The CE notified HHS, affected individuals, and the media, implemented additional technical safeguards, and launched a new HIPAA security training program. OCR provided technical assistance.
Affected (this filing): 306,789