Healthcare Provider · Archived
UPMC Susquehanna
1,208 individuals · submitted November 15, 2017
About this report
An unauthorized individual potentially gained access to the email accounts of 11 staff members after they responded to a phishing email. The breach involved the protected health information (PHI) of 1,208 individuals, including names, dates of birth, social security numbers, addresses, and clinical information. The covered entity (CE) provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE implemented stricter password policies and two-factor authentication for its email system. OCR reviewed the CE's policies and procedures to ensure compliance with the Privacy and Security Rules.
Summary as published by the HHS Office for Civil Rights.
- Organization
- UPMC Susquehanna
- State
- PA
- Entity type
- Healthcare Provider
- Individuals affected
- 1,208
- Submission date
- November 15, 2017
- Breach type
- Hacking/IT Incident
- Location of information
- Business associate present
- No
- OCR status
- Archived
More breach reports in PA
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals
PA · Oct 5, 2026
Franklin/Fulton Mental Health/Intellectual & Developmental Disabilities/Early Intervention
640 individuals
PA · Sep 9, 2026
Novocure Inc.
1,464 individuals
PA · Sep 4, 2026
Beaver County Behavioral Health
501 individuals
PA · Sep 4, 2026
COMHAR, Inc.
501 individuals
PA · Aug 31, 2026
The Foot and Ankle Wellness Center of Western Pennsylvania
653 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
MS · Oct 5, 2026
Hattiesburg Eye Clinic, P.A.
6,137 individuals