A recent phishing attack on Legacy Health resulted in the unauthorized access of around 38,000 patients’ Protected Health Information. The breach was discovered June 21, 2018, and. It looks like some PHI that was possibly accessed includes Driver’s licence numbers as well as Social Security numbers. Due to this data breach, Legacy Health has taken numerous steps to increase their email security and has hired a computer forensics team to help them investigate.
When: Discovered late June 2018
Where: Legacy Health (Based in Portland, Oregon)
Who: Around 38,000 patients
What: Phishing attack
Remedy: Those patients whose driver’s license or Social Security numbers were exposed have been offered complimentary credit monitoring for one year.