Missouri Dept. of Mental Health

Missouri Department of Mental Health reported to HHS on 2017-02-07 a Hacking/IT Incident affecting 5,685 individuals. Business associate Burrell Behavioral Health reported that an unauthorized individual accessed an employee's email account containing ePHI. The employee also sent 13 personal emails to a third-party account. Compromised data included names, treatment information, SSNs, and financial information (~7,748 patients in the account). Breached information was located on Email. The BA conducted a forensic investigation, disabled global email internet access, and provided identity protection to affected individuals. OCR closed the case after confirming the BA agreement conformed to HIPAA requirements.

Affected (this filing): 5,685