Health Data Breach Tracker/PA

Health Plan · Archived

University of Pittsburgh Medical Center Health Plan

18,900 individuals · submitted February 5, 2021

About this report

The covered entity (CE), University of Pittsburgh Medical Center Health Plan, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 18,900 individuals. The ePHI involved included names, dates of birth, and clinical and treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE strengthened it technical safeguards to better protect its ePHI. The CE also retrained workforce members on recognizing and responding to fraudulent email communications.

Summary as published by the HHS Office for Civil Rights.

Organization
University of Pittsburgh Medical Center Health Plan
State
PA
Entity type
Health Plan
Individuals affected
18,900
Submission date
February 5, 2021
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in PA

More Hacking/IT Incident reports