Northwood

Northwood, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-15. The breach occurred during 5/3/2019 - 5/6/2019. The breach was discovered on 5/6/20196/19/2019. 86,050 individuals were affected. Notice was sent on 7/12/20197/15/2019.

Affected (this filing): 86,050

Northwood, Inc., a durable medical equipment supplier, notified California residents of a data breach occurring between May 3 and May 6, 2019. An employee's email credentials were compromised via a phishing email, allowing unauthorized access to the account. The account contained healthcare provider exclusion status information (PHI). Northwood contained the breach, reset credentials, implemented MFA, and offered 2 years of credit monitoring via Kroll.

Northwood, Inc. (Business Associate, MI) reported to HHS OCR on 2019-07-16 an Unauthorized Access/Disclosure breach affecting 3,881 individuals. Breached information was located in Email. HHS noted this review has been consolidated with another review of the same entity involving the same facts.

Affected (this filing): 3,881

Northwood, Inc., a Business Associate (BA) of Blue Care Network and Blue Cross Blue Shield of Michigan (MI), reported to HHS on 2019-07-16 an Unauthorized Access/Disclosure affecting 583 individuals (approximately 18,684 per the description). An employee was the victim of an email phishing scheme exposing PHI including names, addresses, dates of birth, health insurance information, and treatment information. Breached information located on Email. Northwood notified HHS, affected individuals, the media, and the FBI, and implemented additional administrative, technical, and security safeguards. OCR obtained assurances of corrective action.

Affected (this filing): 583