Mosaic

Mosaic reported that multiple employee email accounts were compromised in a phishing attack, exposing the protected health information (PHI) of approximately 3,857 clients. The exposed data included names, dates of birth, addresses, telephone numbers, government-issued identification numbers, medical and insurance numbers, and in some instances social security numbers. In response, Mosaic blocked the attacker's IP address, contacted authorities, and provided additional training to staff.

Affected (this filing): 3,857