HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 9, 2017.
- Organization as reported
- RiverMend Health, LLC, GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Oct. 9, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14035, row:5174)
- Archived copy
- Held in the private archive (provenance)
An employee’s email account was compromised as the result of a phishing email received on July 27, 2017, resulting in the receipt of suspicious emails soliciting fraudulent wire transactions on August 10, 2017. The incident exposed the protected health information (PHI) of 1,366 individuals, including demographic, clinical, claims, and billing information. The covered entity (CE) provided breach notification to HHS and affected individuals and posted substitute notice on its website. As a result of this incident, the CE reset all employee email passwords, terminated the email forwarding rule, and retained an outside company to conduct a forensic investigation. The outside company found no other unauthorized access to the CE’s computer system, network, or PHI. The CE also changed their information technology vendor to one with more secure practices. OCR obtained assurances that the CE implemented the corrective actions noted above.