HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 20, 2024.
- Organization as reported
- Omaha Firefighters Healthcare Trust, NE
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Jan. 20, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10190, row:1329)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Omaha Firefighters Healthcare Trust, reported that an employee was the target of an email phishing scheme that compromised the protected health information of approximately 3,567 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, claims information, and diagnoses/conditions. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE retrained employees regarding phishing emails and cybersecurity measures, reset passwords, revised its password policies, and instituted weekly audit logs to better protect its PHI.