WASHINGTONHHS OCRFirst filing
Filed Jan 26, 2017bd_49f6babe9e449009
MultiCare Health System (WA) reported to HHS OCR on 2017-01-26 a Hacking/IT Incident affecting 1,249 individuals. A phishing attack enabled a hacker to gain access to an employee's email credentials for approximately 3 days. PHI exposed included names, dates of birth, dates of service, diagnoses, medical record numbers, and descriptions of treatment. The CE updated phishing policies, implemented technical safeguards, and retrained staff. OCR provided technical assistance and obtained documented assurances of corrective action. Breached information located on Email.
Affected (this filing): 1,249
HHS notified