Phoenix-based Terros Health, a healthcare organization focused on mental illness and addiction, reported a phishing scam may have compromised 1,600 patients' data, KJZZ reports.
The organization learned in April that an unauthorized third party gained access to an email account using phishing tactics. The email account contained patients' first and last names, dates of birth, addresses and medical records, as well as the Social Security numbers of about 140 patients.
"We have never had a breach of this magnitude in our history," Terros Health COO Karen Hoffman Tepper told KJZZ. "We actually do a number of things to try to protect our patients and are very very careful with it. We're in the process right now of evaluating and doing some additional things in terms of enhancing our policies and procedures and our training to ensure that this doesn't happen again."
More articles on cybersecurity:
Boards' interest in improving cybersecurity rises 23% since 2017, survey finds
One-third of healthcare CIOs 'still on the journey' to comply with GDPR privacy rules
New York suspends former U of Rochester Medical Center nurse for sharing patient data with new employer