COHHS OCRFirst filing
Filed May 4, 2022bd_3b352d009d8b4d2e
Vail Health Services (CO) reported to HHS on 2022-05-04 a Hacking/IT Incident affecting 41,889 individuals. Multiple employees were victims of an email phishing attack exposing PHI including names, dates of birth, addresses, diagnoses, passport numbers, health insurance information, drivers' license numbers, Social Security numbers, and clinical information. Breached information located on Email and Network Server. The CE retrained staff on email security and implemented additional technical safeguards. OCR provided technical assistance regarding HIPAA Privacy and Security Rule obligations.
Affected (this filing): 41,889
HHS notified