Southcentral Foundation

Southcentral Foundation (SCF), the covered entity (CE), reported that two SCF employee email accounts were compromised. The breach affected 14,719 individuals. The types of PHI involved included names, addresses, dates of birth, social security numbers, medical record numbers, clinical information, lab results, medications prescribed, treatment information, and claims information. SCF disabled the accounts to stop any further access. As a result of the breach, SCF revised its policies and procedures to include additional security measures, strengthened its password requirements, and retrained its staff. The CE provided affected individuals with free credit monitoring.