Breachesby GlyphCity of Philadelphia
Disclosed Oct 20, 20236,107 affectedConfirmed
The City of Philadelphia, the covered entity (CE), reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 6,107 individuals. The PHI involved included names, dates of birth, addresses, clinical and financial information, and other identifiers. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented an enhanced alert notification to improve email monitoring detection.
What is known
| People affected | 6,107 (as reported to HHS) |
|---|---|
| Disclosed | Oct 20, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Government · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at City of Philadelphia
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 6107by backfillSource
2024-07-08 to 2023-10-20by backfillSource
empty to The City of Philadelphia, the covered entity (CE), reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 6,107 individuals. The PHI involved included names,by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.