The covered entity (CE), Defense Health Agency, reported that several employees were the targets of an email phishing scheme that affected the protected health information (PHI) of approximately 11,844 individuals. The PHI involved names, addresses, dates of birth, other identifiers, claims information, diagnoses/conditions, and other treatment information. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
2026-09-25 · records: 11844 to 96271 · backfill source
2026-09-25 · disclosed: 2026-04-14 to 2026-03-12 · backfill source
2026-09-25 · records: 1300 to 11844 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Defense Health Agency, reported that several employees were the targets of an email phishing scheme that affected the protected health information (PHI) of approximately 11,844 individuals. The PHI involved names, a · backfill source
