Added this week to the Department of Health and Human Services’ HIPAA Breach Reporting Tool website of major health data breaches affecting 500 or more individuals are large hacking/IT incidents reported by West Virginia-based Monongalia Health System Inc. and Florida-based BioPlus Specialty Pharmacy Services LLC. Combined, the two breaches affected nearly 750,000 individuals.
In a statement issued Wednesday, Morgantown, West Virginia-based Monongalia Health System and its affiliated hospitals, Monongalia County General Hospital Co. and Stonewall Jackson Memorial Hospital Co., which collectively are known as Mon Health, said they had concluded an Oct. 29 an investigation into a phishing incident involving a business email compromise scheme.
Altamonte Springs, Florida-based BioPlus Specialty Pharmacy Services on Dec. 10 reported to HHS OCR that a hacking incident involving a network server had affected the PHI of 350,000 individuals.