Roper St. Francis Healthcare

On November 15, 2018, and November 19, 2018, a number of employees followed a link from a phishing email and provided their credentials, allowing an unauthorized individual to gain access to their email accounts and the protected health information (PHI) of 35,253 patients. Upon discovering the breach, the covered entity (CE), Roper St. Francis Healthcare, immediately forced a password reset on all affected users' email accounts. The CE provided breach notification to HHS, affected individuals, and the media. The CE also implemented monthly audits on its email inboxes and scheduled payroll deposits and implemented multifactor authentication for access by external users. OCR obtained assurances that the CE implemented the corrective actions listed above.