BJC Health System (Business Associate, MO) reported to HHS on 2020-05-05 a Hacking/IT Incident affecting 287,876 individuals via an email phishing scheme. Several employees were compromised. PHI exposed included names, addresses, dates of birth, driver's license numbers, Social Security numbers, diagnoses, medical conditions, lab results, and medications prescribed. Breached information located in Email. The BA notified HHS, affected individuals, and media; provided credit monitoring; and retrained staff on email security.
Affected (this filing): 287,876