COHHS OCRFirst filing
Filed Sep 8, 2017bd_5a374454ce801578
Children's Hospital Colorado reported to HHS OCR on 2017-09-08 a Hacking/IT Incident (email phishing) affecting 3,370 individuals' PHI stored in email accounts. OCR investigation found MFA was disabled on a compromised account. OCR imposed a $548,265 civil money penalty. Breached info located in Email. No business associate was involved. The entity is a pediatric hospital, so minor patient records are implicated.
Affected (this filing): 3,370
HHS notified