Heartland Medical Clinic dba Heartland Community Health Center (KS) reported to HHS OCR on 2025-02-10 that an employee email phishing incident exposed PHI of 43,768 individuals. Compromised data included names, SSNs, addresses, dates of birth, driver's license numbers, claims and financial information, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, affected individuals, and the media; provided substitute notice and complimentary credit monitoring; implemented additional safeguards; and retrained workforce.
Affected (this filing): 43,768