Health Data Breach Tracker/CT

Business Associate · Archived

Women’s Health USA, Inc.

17,531 individuals · submitted March 29, 2019

About this report

On February 15, 2019, the covered entity (CE), Women’s Health USA, Inc., discovered a phishing attack that targeted employee emails and resulted in the unauthorized auto-forwarding of copies of incoming e-mails to an e-mail account unaffiliated with the CE or the employee. The incident affected the protected health information (PHI) of approximately 17,531 individuals and included patient’s names, dates of birth, Social Security numbers, Medicare claim numbers, health insurance policy numbers, diagnoses, and treatment information. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE began implementing two-factor authentication, retrained employees, and disabled email forwarding capabilities.

Summary as published by the HHS Office for Civil Rights.

Organization
Women’s Health USA, Inc.
State
CT
Entity type
Business Associate
Individuals affected
17,531
Submission date
March 29, 2019
Breach type
Hacking/IT Incident
Location of information
Desktop Computer, Email
Business associate present
Yes
OCR status
Archived

More breach reports in CT

More Hacking/IT Incident reports