Cornerstone Care, Inc.

Healthcare provider Cornerstone Care, Inc. experienced an unauthorized access incident that affected 11,487 individuals. The breach occurred on November 13, 2019, but was not discovered until January 13, 2021. The compromised information includes names and Social Security numbers. Affected individuals were notified on February 25, 2021, and offered 12 months of credit monitoring and identity protection services.

Affected (this filing): 11,487

Cornerstone Care, Inc. (PA) reported to HHS OCR on 2021-02-25 a Hacking/IT Incident affecting 12,081 individuals. An employee was the victim of an email phishing scheme, exposing ePHI including names, addresses, dates of birth, diagnoses, health insurance information, Social Security numbers, and other treatment information. Breached information was located in Email systems. The covered entity implemented additional safeguards and retrained staff on identifying fraudulent email communications.

Affected (this filing): 12,081