Health Data Breach Tracker/SC

Healthcare Provider · Archived

Roper St. Francis Healthcare

35,253 individuals · submitted January 29, 2019

About this report

On November 15, 2018, and November 19, 2018, a number of employees followed a link from a phishing email and provided their credentials, allowing an unauthorized individual to gain access to their email accounts and the protected health information (PHI) of 35,253 patients. Upon discovering the breach, the covered entity (CE), Roper St. Francis Healthcare, immediately forced a password reset on all affected users' email accounts. The CE provided breach notification to HHS, affected individuals, and the media. The CE also implemented monthly audits on its email inboxes and scheduled payroll deposits and implemented multifactor authentication for access by external users. OCR obtained assurances that the CE implemented the corrective actions listed above.

Summary as published by the HHS Office for Civil Rights.

Organization
Roper St. Francis Healthcare
State
SC
Entity type
Healthcare Provider
Individuals affected
35,253
Submission date
January 29, 2019
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in SC

More Hacking/IT Incident reports