PIH Health

Profile narrative

PIH Health is a healthcare organization headquartered in the United States of America. It operates under the alias PIH Health. As part of its mission, the organization manages patient personal and protected health information.

On June 11, 2019, PIH Health experienced a data security incident involving unauthorized access to employee email accounts. The unauthorized access stemmed from a targeted phishing campaign directed at staff. The breach exposed the personal and protected health information of nearly 200,000 patients. Forensic analysis determined that the compromise was confined to the email systems, with no evidence of misuse of the data.

Upon discovery, PIH Health secured the affected email accounts to prevent further unauthorized access. The organization enlisted external cybersecurity experts to conduct a thorough investigation. Impacted individuals were notified and offered complimentary credit monitoring services. For patients whose contact information was unavailable, substitute notice was provided through a posting on the organization's website.

The incident underscores the vulnerability of healthcare organizations to phishing threats targeting employee communications. It also illustrates the steps taken by PIH Health to address breaches, including account security, expert engagement, patient notification, and remedial offerings. No further details about the organization's size, structure, or ownership are available in the provided sources.

Incidents

1 incident linked to this organisation.