HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 28, 2017.
- Organization as reported
- Miracle-Ear, Inc. and Amplifon (USA), Inc., MN
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Dec. 28, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13954, row:5093)
- Archived copy
- Held in the private archive (provenance)
Miracle-Ear and Amplifon USA, Inc., business associates (BA) of Best Hearing Products, Inc., the covered entity (CE), reported that an employee of Best Hearing Products, Inc., was the victim of an email phishing scheme that affected the protected health information (PHI) of 554 individuals. The PHI involved included names, dates of birth, addresses, and treatment information. The BA notified HHS, affected individuals, and the media. After the breach, the CE implemented administrative and technical safeguards to better protect its data and retrained its employees on the proper methods of identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.