Volunteers of America Southwest California

Volunteers of America Southwest California reported to HHS on 2022-01-14 a Hacking/IT Incident (email phishing) affecting 1,300 individuals. An employee was the victim of a phishing scheme that exposed PHI including names and vaccination records. The CE notified HHS, affected individuals, and the media, provided substitute notice, and implemented additional administrative, technical, and security safeguards. Breached information located on Email. No business associate was involved.

Affected (this filing): 1,300

Volunteers of America Southwest experienced a phishing incident on November 16, 2021, when an employee clicked a malicious link in an email appearing to be from a voicemail service. The attacker used the employee's credentials to access internal financial processes and limited client information, including names and COVID vaccination status. No SSNs or payment card data were involved. The organization contained the incident, reset passwords, and engaged outside experts.