HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 28, 2018.
- Organization as reported
- Toyota Industries North America, Inc. as plan sponsor to the Toyota Industries North America, Inc. Welfare Benefit Plan, IN
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Sept. 28, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13679, row:4818)
- Archived copy
- Held in the private archive (provenance)
Toyota Industries North America, the covered entity (CE), reported that several employees were the victims of an email phishing attack. The breached accounts contained the protected health information (PHI) of 19,320 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license information, Social Security numbers, claims information, financial information, diagnoses/conditions, medications prescribed, and treatment information. The CE reported the breach to HHS, affected individuals, and the media. Following the breach, the CE immediately suspended the affected accounts and implemented additional technical safeguards and retrained its staff. As part of the training, the CE provided instruction on the HIPAA Privacy and Security Rules and on the proper methods for identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.