HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 3, 2017.
- Organization as reported
- City of Hope, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Aug. 3, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14104, row:5243)
- Archived copy
- Held in the private archive (provenance)
City of Hope, the covered entity (CE), reported that a workforce member was a victim of an email phishing scheme. This breach affected 3,400 individuals. The protected health information (PHI) involved in the breach included names, addresses, dates of birth, social security numbers, diagnosis, lab results, medications, and other treatment information. Following the breach, the covered entity disabled remote access to its virtual private network, including email. Additionally, OCR’s investigation resulted in the covered entity improving their security safeguards and retraining employees.