Worldwide Insurance Services, LLC (PA) reported to HHS OCR on 2018-04-30 a Hacking/IT Incident affecting 1,692 individuals. An unauthorized user gained access to employee email accounts via a phishing attack. PHI exposed included patients' names, dates of birth, Social Security numbers, claims information, clinical information, and financial information. Breached information was located in Email. In response, the entity upgraded email encryption, implemented MFA, and trained employees on phishing threats. OCR provided technical assistance on timely breach notifications.
Affected (this filing): 1,692