HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 19, 2019.
- Organization as reported
- Partners For Quality, Inc., PA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- April 19, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13443, row:4582)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Partners for Quality, reported that the email accounts of three employees were accessed by an unauthorized individual after a phishing attack. The breach included the protected health information (PHI) of approximately 3,700 individuals. The PHI involved included names, dates of birth, social security numbers, other demographic information, financial information, and clinical information. Following the breach, the CE implemented multifactor identification for its email system and increased its cybersecurity training. Additionally, OCR provided technical assistance to the covered entity regarding its risk management plan.