HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 18, 2019.
- Organization as reported
- Tri-Cities Chaplaincy, WA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Jan. 18, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13567, row:4706)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Tri-Cities Chaplaincy (TCC), reported that an employee’s email account had been compromised by a phishing scheme. This breach affected approximately 1,086 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, phone numbers, diagnoses/conditions, medications, partial social security numbers, medial record numbers, and other treatment information. The CE notified affected individuals, the media, and HHS. Following the breach, TCC reset the access credentials on the compromised account, implemented additional security safeguards, retrained employees on privacy and security requirements, and revised its policies and procedures. OCR provided the CE with technical assistance regarding its security management process.