Asian Health Services discovered unauthorized access to an employee email account between February 7 and February 13, 2023. The incident potentially exposed PHI including names, medical record numbers, dates of birth, phone numbers, and diagnoses for patients. No SSNs or financial data were involved. The organization secured the account, engaged forensic experts, notified law enforcement, and offered credit/cyber monitoring services to affected individuals.