Health Data Breach Tracker/MA

Business Associate · Archived

UMass Memorial Health Care

4,270 individuals · submitted February 28, 2022

About this report

The covered entity (CE), UMass Memorial Health, reported that several employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 4,270 individuals. The PHI involved included names, Social Security numbers, dates of birth, addresses, drivers’ license numbers, diagnoses, lab results, and health insurance information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards. Staff were retrained on email security.

Summary as published by the HHS Office for Civil Rights.

Organization
UMass Memorial Health Care
State
MA
Entity type
Business Associate
Individuals affected
4,270
Submission date
February 28, 2022
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
Yes
OCR status
Archived

More breach reports in MA

More Hacking/IT Incident reports