Health Data Breach Tracker/IN

Healthcare Provider · Archived

Lafayette Regional Rehabilitation Hospital

1,360 individuals · submitted January 24, 2020

About this report

The covered entity (CE), Lafayette Regional Rehabilitation Hospital, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 1,360 individuals. The PHI involved included names, dates of birth, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained on email security.

Summary as published by the HHS Office for Civil Rights.

Organization
Lafayette Regional Rehabilitation Hospital
State
IN
Entity type
Healthcare Provider
Individuals affected
1,360
Submission date
January 24, 2020
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in IN

More Hacking/IT Incident reports