[{"innerBlocks":[],"name":"core\/freeform","postId":517,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"UC Health suffered a phishing attack in early July that led to unauthorized access to several employee email accounts.The health system, which serves the greater Cincinnati and Northern Kentucky metropolitan area, reported that the accounts were infiltrated between July 6 and July 12.After the breach was discovered, the organization secured accounts and launched an investigation that continues with the help of a data forensics firm. The investigation, however, has been unable to determine whether the hacker actually viewed emails or attachments to the affected emails.

UC Health issued a proactive notice that is unusual, considering the organization is not yet formally notifying patients. The organization now is reviewing emails and attachments in the accounts to identify patients whose protected health information may have been accessible to the hacker. An early look at information at risk includes data such as patient names, dates of birth, medical record numbers and clinical information.Also See:<\/b> How regular phishing drills keep providers safe<\/a>\u201cUC Health continues to investigate this incident and anticipates notifying patients in the coming weeks,\u201d UC Health told patients and regulators. \u201cAlthough UC Health has no indication that any patient information has been misused, in an abundance of caution UC Health has established a call center for patients to call with questions.\u201dThe organization urged patients to review statements from their providers and to contact providers immediately if they see services on statements that were not rendered.As is becoming more common at the suggestion of the HHS Office for Civil Rights, which enforces the HIPAA privacy and security rules, UC Health apologized to affected individuals. \u201cUC Health takes the privacy and security of its patients\u2019 very seriously and deeply regrets any inconvenience this incident may cause its patients. To help prevent something like this from happening again, UC Health is enhancing its email security by reinforcing education with employees on how to identify and avoid malicious emails.\u201dThe organization will be sending information to HHS which will include details of the attack and the number of affected individuals, and a formal patient notification process will commence.","saveContent":"UC Health suffered a phishing attack in early July that led to unauthorized access to several employee email accounts.The health system, which serves the greater Cincinnati and Northern Kentucky metropolitan area, reported that the accounts were infiltrated between July 6 and July 12.After the breach was discovered, the organization secured accounts and launched an investigation that continues with the help of a data forensics firm. The investigation, however, has been unable to determine whether the hacker actually viewed emails or attachments to the affected emails. UC Health issued a proactive notice that is unusual, considering the organization is not yet formally notifying patients. The organization now is reviewing emails and attachments in the accounts to identify patients whose protected health information may have been accessible to the hacker. An early look at information at risk includes data such as patient names, dates of birth, medical record numbers and clinical information.Also See:<\/b> How regular phishing drills keep providers safe<\/a>\u201cUC Health continues to investigate this incident and anticipates notifying patients in the coming weeks,\u201d UC Health told patients and regulators. \u201cAlthough UC Health has no indication that any patient information has been misused, in an abundance of caution UC Health has established a call center for patients to call with questions.\u201dThe organization urged patients to review statements from their providers and to contact providers immediately if they see services on statements that were not rendered.As is becoming more common at the suggestion of the HHS Office for Civil Rights, which enforces the HIPAA privacy and security rules, UC Health apologized to affected individuals. \u201cUC Health takes the privacy and security of its patients\u2019 very seriously and deeply regrets any inconvenience this incident may cause its patients. To help prevent something like this from happening again, UC Health is enhancing its email security by reinforcing education with employees on how to identify and avoid malicious emails.\u201dThe organization will be sending information to HHS which will include details of the attack and the number of affected individuals, and a formal patient notification process will commence.","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Hackers access UC Health employees’ email accounts in phishing attack

More for you