HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 30, 2018.
- Organization as reported
- Worldwide Insurance Services, LLC, PA
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- April 30, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13831, row:4970)
- Archived copy
- Held in the private archive (provenance)
An unauthorized user gained access to employees’ email account after a phishing attack. The breach included the protected health information (PHI) of 1,692 individuals including patients’ names, dates of birth, social security numbers, claims information, clinical information, and financial information. Following the breach, the covered entity upgraded its email encryption software, implemented multi-factor authentication for its email accounts, and trained employees on phishing emails and cyber threats. Additionally, OCR provided technical assistance on timely breach notifications.