3 phishing hacks breach 20,000 Catawba Valley patient records

North Carolina-based Catawba Valley Medical Center is notifying 20,000 patients that their personal data was breached after three successful phishing attacks. The breaches occurred between July 4 and August 17 and included patient names, dates of birth, medical data, health insurance information, and some Social Security numbers. The medical center has taken steps to improve employee education and strengthen email controls and security measures. Phishing attacks have been a common cause of breaches in recent months.