HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 24, 2019.
- Organization as reported
- Huggins Insurance Services, Inc., OR
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- May 24, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13388, row:4527)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), Huggins Insurance Services, reported that several employees were the victims of an email phishing scheme which affected the electronic protected health information (ePHI) of 5,725 individuals. The ePHI involved included names, addresses, dates of birth, drivers’ license information, Social Security numbers, claims information, financial data, and clinical information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards and retrained its staff on the proper methods for identifying fraudulent email communications. OCR provided technical assistance to the BA regarding the provisions of the HIPAA Security Rule.