Back to the register
Community Memorial Health System
ArchivedSubmitted 09/05/2017
Updated 20 hours ago ()
- State
- CA
- Covered entity type
- Healthcare Provider
- Individuals affected
- 959
- Business associate present
- No
- Type of breach
- Hacking/IT Incident
- Location of breached information
- First seen by InfoSec Signals
- Sep 23, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
On June 22, 2017, several hundred staff members at Community Memorial Health System, the covered entity (CE), received phishing emails. One employee working remotely followed the link, compromising her account. The CE provided breach notification to HHS, affected individuals, and the media. The CE took steps to limit unauthorized access to its systems, including disabling external and mobile device access, requiring all users to reset their account credentials, and requiring two-factor verification for access. Since the incident, the CE sanctioned the responsible workforce member, improved technical safeguards, and deployed a software solution for centralized monitoring of server logging data in order to more quickly identify a breach. OCR obtained assurances that the CE implemented the corrective actions noted here.
Change history
- Sep 23, 2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.