Breachesby GlyphEPIC MANAGEMENT
Disclosed Nov 14, 202210,050 affectedConfirmed
The business associate (BA), EPIC Management, reported that an employee was the victim of an email phishing scheme that compromised the protected health information (PHI) of 1,190 individuals. The PHI involved included names, member identification numbers, and health insurance and financial information. The BA notified HHS, affected individuals, and the media. In response to the breach the BA implemented additional technical safeguards and retrained its workforce members to better protect its PHI. OCR provided technical assistance to the BA regarding the HIPAA Rules.
What is known
| People affected | 10,050 (as reported by the organization) |
|---|---|
| Disclosed | Nov 14, 2022 |
| Happened | Jan 24, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
2022-12-14 to 2022-11-14by backfillSource
other to insuranceby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to The business associate (BA), EPIC Management, reported that an employee was the victim of an email phishing scheme that compromised the protected health information (PHI) of 1,190 individuals. The PHI involved included names, member identifby backfillSource
empty to organizationby backfillSource
empty to 10050by backfillSource
2023-03-08 to 2022-12-14by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.