HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 6, 2018.
- Organization as reported
- The Terteling Co., Inc., Group Benefit Plan, ID
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- July 6, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13760, row:4899)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), a group health plan, reported to OCR that multiple employees responded to a phishing email which compromised the protected health information (PHI) of 4,824 plan members. The types of breached PHI included names, addresses, dates of birth, driver’s license information, social security numbers, claims information, diagnoses, and medications. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE strengthened its administrative and technical safeguards, such as authentication procedures and measures to identify and remove malicious emails. It also increased its security training. As a result of OCR’s investigation the CE enhanced its practices for safeguarding PHI.