HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 26, 2019.
- Organization as reported
- Perry County Medical Center Inc. d/b/a Three Rivers Community Health Group, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- July 26, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13294, row:4433)
- Archived copy
- Held in the private archive (provenance)
Perry County Medical Center dba Three Rivers Community Health Group, the covered entity (CE), reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 3,958 individuals. The ePHI involved included names, birthdates, clinical information, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented new technical safeguards and retrained its staff on the proper methods of identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.