MNHHS OCRFirst filing
Filed Apr 9, 2019bd_772c537f7f84612f
Minnesota Department of Human Services (covered entity) reported that an employee fell victim to an email phishing scheme, exposing PHI of 10,263 individuals. PHI included names, dates of birth, addresses, Social Security numbers, prescribed medications, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media; implemented additional security, technical, and administrative safeguards; and retrained staff. OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 10,263
HHS notified