Health Data Breach Tracker/IA

Health Plan · Archived

Iowa Department of Human Services

811 individuals · submitted October 20, 2017

About this report

The covered entity (CE), Iowa Department of Human Services, reported that several employees were subject to an email phishing scheme that affected the protected health information (PHI) of 811 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media. In response to the breach the CE provided complimentary credit monitoring services and strengthened its technical safeguards and sanctioned the responsible employees. Staff were also retrained on email security.

Summary as published by the HHS Office for Civil Rights.

Organization
Iowa Department of Human Services
State
IA
Entity type
Health Plan
Individuals affected
811
Submission date
October 20, 2017
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in IA

More Hacking/IT Incident reports