Northwood, Inc., a business associate (BA) of Blue Care Network and Blue Cross Blue Shield of Michigan, reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 18,684 individuals. The PHI involved included names, addresses, dates of birth, health insurance information, and treatment information. Northwood notified HHS, affected individuals, the media, and the FBI. In its mitigation efforts, Northwood implemented additional administrative technical, and security safeguards to better protect its PHI. OCR obtained assurances that Northwood implemented the corrective action noted.
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · summary: empty to Northwood, Inc., a business associate (BA) of Blue Care Network and Blue Cross Blue Shield of Michigan, reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximate · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 86050 · backfill source
2026-09-25 · disclosed: 2019-07-15 to 2019-07-12 · backfill source
2026-09-25 · sector: other to health · backfill source
2026-09-25 · attack: unknown to phishing · backfill source
2026-09-25 · discovered: empty to 2019-05-06 · backfill source
