Valley Mountain Regional Center, a business associate (BA), reported that multiple employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 17,197 individuals. The PHI involved included names, dates of birth, and addresses. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the BA strengthened its technical safeguards to better protect PHI. OCR provided technical assistance to the BA.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 17197 · backfill source
2026-09-25 · summary: empty to Valley Mountain Regional Center, a business associate (BA), reported that multiple employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 17,197 individuals. The PHI involved includ · backfill source
