HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 29, 2020.
- Organization as reported
- Salinas Valley Memorial Healthcare System, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- June 29, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12804, row:3943)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Salinas Valley Memorial Healthcare System, reported that several workforce members were the victims of an email phishing attack that affected the electronic protected health information (ePHI) of 2,384 individuals. The ePHI involved included demographic and clinical information such as names, addresses, dates of birth, other identifiers, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In addition, the CE offered complimentary credit monitoring services to all affected individuals. In response to the breach, the CE sanctioned the workforce members involved in the incident, retrained workforce members on identifying fraudulent email communications, and implemented additional technical safeguards.