{"id":3397,"date":"2021-05-27T20:13:00","date_gmt":"2021-05-27T20:13:00","guid":{"rendered":"https:\/\/dbhids.org\/dev\/?post_type=news&#038;p=3397"},"modified":"2022-12-06T20:16:20","modified_gmt":"2022-12-06T20:16:20","slug":"hipaa-breach-update-may-27-2021","status":"publish","type":"news","link":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/","title":{"rendered":"HIPAA Breach Update: May 27, 2021"},"content":{"rendered":"\n<p>May 27, 2021<\/p>\n\n\n\n<p><a href=\"https:\/\/dbhids.org\/news\/hipaa-breach-discovered-at-the-philadelphia-department-of-behavioral-health-and-intellectual-disability-services-2\/\">Posted 6\/1\/20<\/a><br><a href=\"https:\/\/dbhids.org\/news\/hipaa-breach-discovered-at-the-philadelphia-department-of-behavioral-health-and-intellectual-disability-services-3\/\">Updated 6\/15\/20<\/a><br><a href=\"https:\/\/dbhids.org\/wp-content\/uploads\/2020\/06\/Website-Notice-update-062320.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Updated 6\/24\/20<\/a><br><a href=\"https:\/\/dbhids.org\/wp-content\/uploads\/2020\/08\/Website-Notice-DBHIDS-081420.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Updated 8\/14\/20<\/a><br><a href=\"https:\/\/dbhids.org\/wp-content\/uploads\/2020\/10\/substitute-notice-DBHIDS-CBH-100520.pdf\">Updated 10\/5\/20<\/a><br><a href=\"https:\/\/dbhids.org\/wp-content\/uploads\/2020\/12\/DBHIDS.CBH-Substitute-Notice_120720.pdf\">Updated 12\/7\/20<\/a><br><a href=\"https:\/\/dbhids.org\/wp-content\/uploads\/2021\/01\/DBHIDS-Substitute-Notice-010421.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Updated 1\/4\/21<\/a><br><a href=\"https:\/\/www.phila.gov\/2021-05-27-email-phishing-campaign-causes-potential-data-breach-at-the-city-of-philadelphia\/https:\/\/dbhids.org\/news\/hipaa-breach-update\/?mc_cid=3b19ec3f79&amp;mc_eid=4e2f7398e7\" target=\"_blank\" rel=\"noreferrer noopener\">Updated 5\/27\/21<\/a><\/p>\n\n\n\n<p><strong><a href=\"https:\/\/www.phila.gov\/2021-05-27-email-phishing-campaign-causes-potential-data-breach-at-the-city-of-philadelphia\/\" target=\"_blank\" rel=\"noreferrer noopener\">CLICK TO READ ENTIRE RELEASE AT PHILA.GOV<\/a><\/strong><\/p>\n\n\n\n<p><strong>Email Phishing Campaign Causes Potential Data Breach at the City of Philadelphia<\/strong><\/p>\n\n\n\n<p>PHILADELPHIA \u2014&nbsp;The City of Philadelphia (the \u201cCity\u201d) announced today an update on its investigation into a security incident that may have permitted multiple employee email accounts to be accessed by unauthorized individuals. This update relates to the incident initially reported on June 1, 2020, which impacted individuals served by the Department of Behavioral Health and Intellectual disAbility Services (\u201cDBHIDS\u201d) and its business associate, Community Behavioral Health (\u201cCBH\u201d) (<em>posted&nbsp;<strong><a href=\"https:\/\/dbhids.org\/news\/hipaa-breach-update\/\" target=\"_blank\" rel=\"noreferrer noopener\">online here<\/a><\/strong><\/em>). CBH assists DBHIDS in administering the behavioral health Medicaid program (HealthChoices) for the Philadelphia region. The City\u2019s investigation since the initial report revealed that the incident impacted email accounts utilized by additional City departments.<\/p>\n\n\n\n<p>On March 31, 2020, DBHIDS learned that an employee\u2019s email account had been compromised as a result of a phishing attack. The Office of Innovation and Technology\u2019s Information Security Group (\u201cOIT\u201d) immediately secured the account and began an investigation. Following this initial discovery, OIT discovered multiple additional DBHIDS and CBH accounts that were compromised as part of the attack. The password for each account was changed promptly upon discovery. The City\u2019s investigation efforts have confirmed that the DBHIDS and CBH accounts were subject to unauthorized access intermittently between March 11 and November 15, 2020. The investigation further confirmed that additional City departments\u2019 accounts were intermittently subject to unauthorized access between the start of this incident and January 2021. This attack is believed to be connected to a series of malicious attacks that targeted health care and social services agencies during the COVID-19 global pandemic.<\/p>\n\n\n\n<p>To date, the investigation has been unable to confirm whether any unauthorized persons have viewed any emails or attachments in the compromised accounts.<\/p>\n\n\n\n<p>If you receive services or support through DBHIDS and have questions or concerns, you can call <a href=\"tel:1-888-858-1748\">1-888-858-1748<\/a> for more information. CBH members can call <a href=\"tel:1-888-545-2600\">1-888-545-2600<\/a> for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>May 27, 2021 Posted 6\/1\/20Updated 6\/15\/20Updated 6\/24\/20Updated 8\/14\/20Updated 10\/5\/20Updated 12\/7\/20Updated 1\/4\/21Updated 5\/27\/21 CLICK TO READ ENTIRE RELEASE AT PHILA.GOV Email Phishing Campaign Causes Potential Data Breach at the City of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"tags":[66,102,42,142,145,144,143],"news-category":[],"class_list":["post-3397","news","type-news","status-publish","hentry","tag-cbh","tag-city-of-philadelphia","tag-dbhids","tag-hipaa","tag-office-of-innovation-and-technology","tag-phishing","tag-security-breach"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>HIPAA Breach Update: May 27, 2021 - DBHIDS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HIPAA Breach Update: May 27, 2021\" \/>\n<meta property=\"og:description\" content=\"May 27, 2021 Posted 6\/1\/20Updated 6\/15\/20Updated 6\/24\/20Updated 8\/14\/20Updated 10\/5\/20Updated 12\/7\/20Updated 1\/4\/21Updated 5\/27\/21 CLICK TO READ ENTIRE RELEASE AT PHILA.GOV Email Phishing Campaign Causes Potential Data Breach at the City of [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/\" \/>\n<meta property=\"og:site_name\" content=\"DBHIDS\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DBHIDS\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-06T20:16:20+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@dbhids\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/\",\"url\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/\",\"name\":\"HIPAA Breach Update: May 27, 2021 - DBHIDS\",\"isPartOf\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#website\"},\"datePublished\":\"2021-05-27T20:13:00+00:00\",\"dateModified\":\"2022-12-06T20:16:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dbhids.org\/dev\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\/\/dbhids.org\/dev\/news\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"HIPAA Breach Update: May 27, 2021\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dbhids.org\/dev\/#website\",\"url\":\"https:\/\/dbhids.org\/dev\/\",\"name\":\"DBHIDS\",\"description\":\"The mission of the Department of Behavioral Health and Intellectual disAbility Services is to educate, strengthen, and serve individuals and communities so that all Philadelphians can thrive.\",\"publisher\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dbhids.org\/dev\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dbhids.org\/dev\/#organization\",\"name\":\"Department of Behavioral Health and Intellectual disAbility Services\",\"url\":\"https:\/\/dbhids.org\/dev\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png\",\"contentUrl\":\"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png\",\"width\":211,\"height\":55,\"caption\":\"Department of Behavioral Health and Intellectual disAbility Services\"},\"image\":{\"@id\":\"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DBHIDS\",\"https:\/\/x.com\/dbhids\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"HIPAA Breach Update: May 27, 2021 - DBHIDS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"HIPAA Breach Update: May 27, 2021","og_description":"May 27, 2021 Posted 6\/1\/20Updated 6\/15\/20Updated 6\/24\/20Updated 8\/14\/20Updated 10\/5\/20Updated 12\/7\/20Updated 1\/4\/21Updated 5\/27\/21 CLICK TO READ ENTIRE RELEASE AT PHILA.GOV Email Phishing Campaign Causes Potential Data Breach at the City of [&hellip;]","og_url":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/","og_site_name":"DBHIDS","article_publisher":"https:\/\/www.facebook.com\/DBHIDS","article_modified_time":"2022-12-06T20:16:20+00:00","twitter_card":"summary_large_image","twitter_site":"@dbhids","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/","url":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/","name":"HIPAA Breach Update: May 27, 2021 - DBHIDS","isPartOf":{"@id":"https:\/\/dbhids.org\/dev\/#website"},"datePublished":"2021-05-27T20:13:00+00:00","dateModified":"2022-12-06T20:16:20+00:00","breadcrumb":{"@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dbhids.org\/dev\/news\/hipaa-breach-update-may-27-2021\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dbhids.org\/dev\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/dbhids.org\/dev\/news\/"},{"@type":"ListItem","position":3,"name":"HIPAA Breach Update: May 27, 2021"}]},{"@type":"WebSite","@id":"https:\/\/dbhids.org\/dev\/#website","url":"https:\/\/dbhids.org\/dev\/","name":"DBHIDS","description":"The mission of the Department of Behavioral Health and Intellectual disAbility Services is to educate, strengthen, and serve individuals and communities so that all Philadelphians can thrive.","publisher":{"@id":"https:\/\/dbhids.org\/dev\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dbhids.org\/dev\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dbhids.org\/dev\/#organization","name":"Department of Behavioral Health and Intellectual disAbility Services","url":"https:\/\/dbhids.org\/dev\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/","url":"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png","contentUrl":"https:\/\/dbhids.org\/dev\/wp-content\/uploads\/2022\/10\/logo2.png","width":211,"height":55,"caption":"Department of Behavioral Health and Intellectual disAbility Services"},"image":{"@id":"https:\/\/dbhids.org\/dev\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DBHIDS","https:\/\/x.com\/dbhids"]}]}},"_links":{"self":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news"}],"about":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/types\/news"}],"author":[{"embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/comments?post=3397"}],"version-history":[{"count":1,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3397\/revisions"}],"predecessor-version":[{"id":3398,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news\/3397\/revisions\/3398"}],"wp:attachment":[{"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/media?parent=3397"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/tags?post=3397"},{"taxonomy":"news-category","embeddable":true,"href":"https:\/\/dbhids.org\/dev\/wp-json\/wp\/v2\/news-category?post=3397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}