Health Data Breach Tracker/MD

Healthcare Provider · Archived

Saint Agnes Health Care, Inc.

24,967 individuals · submitted April 24, 2015

About this report

An unauthorized user gained access to employees' email accounts due to a phishing attack. The breach included the protected health information (PHI of approximately 25,000 individuals and included demographic, financial, and clinical information. The covered entity (CE) provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE provided additional staff training regarding phishing attacks and implemented additional safeguards for its email system to prevent phishing attacks. OCR reviewed the CE's risk analysis and ensured it took appropriate steps to implement its risk management plan.

Summary as published by the HHS Office for Civil Rights.

Organization
Saint Agnes Health Care, Inc.
State
MD
Entity type
Healthcare Provider
Individuals affected
24,967
Submission date
April 24, 2015
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in MD

More Hacking/IT Incident reports