Breachesby GlyphFora Health
Disclosed Feb 1, 20241,568 affectedConfirmed
The covered entity (CE), FORA Health, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 1,568 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, and medications. The CE notified HHS, the affected individuals, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained on email security. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 1,568 (as reported to HHS) |
|---|---|
| Disclosed | Feb 1, 2024 |
| Discovered | Dec 19, 2023 |
| Happened | Dec 14, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 1568by backfillSource
empty to The covered entity (CE), FORA Health, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 1,568 individuals. The PHI involved included names, addresses, datesby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.