HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 24, 2015.
- Organization as reported
- Seton Family of Hospitals, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- April 24, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14815, row:5954)
- Archived copy
- Held in the private archive (provenance)
Seton Family of Hospitals, the covered entity (CE), experienced two email phishing attacks. The attacks involved protected health information (PHI) including the names, dates of birth, social security numbers, and treatment information of approximately 39,160 individuals. Upon discovering the breach, the CE took steps to immediately disable affected email accounts. The CE provided breach notification to HHS, affected individuals, and the media. The CE improved technical security and retrained staff. OCR obtained assurances that the CE implemented the corrective actions listed.