UHS of Delaware, Inc. (a business associate, PA) reported to HHS on 2023-03-29 a Hacking/IT Incident affecting 40,290 individuals. An employee of a subcontractor was the subject of an email phishing scheme that compromised PHI including names, addresses, dates of birth, claims and health insurance information, diagnoses, and other treatment information. Breached information located on Email. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. Additional safeguards were implemented and staff were retrained on email security.
Affected (this filing): 40,290