Breachesby GlyphEinstein Healthcare Network
Disclosed Oct 9, 2020353,616 affectedConfirmed
The covered entity (CE), Einstein Healthcare Network, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 353,616 individuals. The ePHI involved included names, dates of birth, addresses, Social Security numbers, health insurance information, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE strengthened its technical and security safeguards and retrained its staff on email security.
What is known
| People affected | 353,616 (as reported to HHS) |
|---|---|
| Disclosed | Oct 9, 2020 |
| Discovered | Aug 10, 2020 |
| Happened | Aug 5, 2020 |
| Attack | Phishing |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Einstein Healthcare Network
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 353616by backfillSource
2021-01-25 to 2020-10-09by backfillSource
empty to The covered entity (CE), Einstein Healthcare Network, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 353,616 individuals. The ePHI involved included nby backfillSource
unknown to phishingby backfillSource
empty to 2020-08-10by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.