Patient information in email Phishing breach
PIH Health: patient records were exposed through employee email
- Incident
- June 2019
- Source report
What was reported
HHS reported that a June 2019 phishing attack at PIH Health exposed unsecured electronic health information belonging to 189,763 people. The affected email accounts contained information including diagnoses, lab results and identifiers. PIH paid $600,000 and agreed to corrective measures to settle potential HIPAA violations.
Read the report from U.S. Department of Health and Human Services
Our perspective
Our reading: Email can become an uncontrolled second archive of clinical information. Keeping routine task context separate from full patient records is relevant to how we design private AI memory.
Try Vivendur in actionLimits of this connection
The settlement addressed potential violations. This case does not test AI memory controls or show that Vivendur would stop phishing or satisfy HIPAA requirements.