Breachesby GlyphUniversity of California, San Francisco
Disclosed Apr 26, 2023676 affectedConfirmed
The covered entity (CE), University of California, San Francisco, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 676 individuals. The PHI involved included names, dates of birth, diagnoses/conditions, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards and retrained its workforce members to better protect its PHI.
What is known
| People affected | 676 (as reported to HHS) |
|---|---|
| Disclosed | Apr 26, 2023 |
| Happened | Feb 9, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Education · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at University of California, San Francisco
Breach, details not statedBreach notice filed with the California AG, details not stated.EducationUSNov 13, 2020Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the California AG.8,294 affectedEducationUSOct 3, 2013Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.7,300 affectedHealthcareUSDec 15, 2009
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 676by backfillSource
empty to The covered entity (CE), University of California, San Francisco, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 676 individuals. The PHI involved included namesby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.