HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 26, 2024.
- Organization as reported
- Georgia Department of Public Health, GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Nov. 26, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9577, row:716)
- Archived copy
- Held in the private archive (provenance)
Georgia Department of Public Health, the covered entity (CE), learned that an employee of its business associate (BA) was the target of an email phishing scheme that compromised the protected health information (PHI) of 532 individuals. The PHI included names, diagnoses and conditions, and other treatment information. The CE notified HHS, affected individuals, and the media. OCR provided technical assistance regarding the HIPAA Rules.