"Kaiser Permanente has recently discovered unauthorized access to two employee email accounts. The account compromises were detected on September 3, 2024, and the accounts were immediately secured and passwords were reset. The investigation confirmed that the accounts contained the protected health information of patients and members in Southern California, including first and last names, dates of birth, medical record numbers, and medical information, but not Social Security numbers, financial information, or usernames/passwords.
While there are no indications that any of the exposed information has been misused, Kaiser Permanente has recommended that the affected individuals should monitor their accounts, explanation of benefits statements, and credit reports for signs of misuse of their personal information. Kaiser Permanente said it is taking steps to prevent similar incidents in the future, including strengthening internal practices and controls. The incident is not yet shown on the HHS’ Office for Civil Rights website so it is unclear how many individuals have been affected."
https://www.hipaajournal.com/kaiser-permanente-soliant-health-potomac-medical-aesthetics-email-breach/
"Kaiser Permanente has recently discovered unauthorized access to two employee email accounts. The account compromises were detected on September 3, 2024, and the accounts were immediately secured and passwords were reset. The investigation confirmed that the accounts contained the protected health information of patients and members in Southern California, including first and last names, dates of birth, medical record numbers, and medical information, but not Social Security numbers, financial information, or usernames/passwords.
While there are no indications that any of the exposed information has been misused, Kaiser Permanente has recommended that the affected individuals should monitor their accounts, explanation of benefits statements, and credit reports for signs of misuse of their personal information. Kaiser Permanente said it is taking steps to prevent similar incidents in the future, including strengthening internal practices and controls. The incident is not yet shown on the HHS’ Office for Civil Rights website so it is unclear how many individuals have been affected."