MJ Care

MJ Care operates under the alias MJ Care. Its headquarters is located in the United States of America. According to the reported incident, MJ Care functions as a therapist practice based in Washington state. The organization provides mental health therapy services to patients. These services involve the collection and handling of protected health information.

On May 31, 2022, MJ Care experienced unauthorized access to an email account containing patient protected health information. The breach was the result of a phishing attack that compromised the email account. Exposed data included names, Social Security numbers, financial information, treatment details, insurance information, and other medical records. The incident affected a total of 1,832 individuals. Because Social Security numbers were compromised, the organization offered complimentary credit monitoring to those impacted.

Following the intrusion, MJ Care conducted a thorough review of the affected email account. This account review was completed several months after the initial breach was discovered. After the review, the organization proceeded to notify all affected patients about the exposure of their information. Notification letters detailed the types of data that had been accessed and the steps being taken to mitigate harm. The organization’s response included providing information on how to enroll in the offered credit monitoring services.