Phishing attack breaches 38,000 patient records at Legacy Health

Legacy Health in Portland, Oregon, has notified 38,000 patients that their data may have been breached in a phishing attack. Unauthorized access to employee email accounts began in May 2018, and patient data including demographic information, health insurance details, and Social Security numbers may have been compromised. Legacy Health is implementing additional access restrictions and providing impacted patients with one year of free monitoring. Phishing attacks have been the biggest cyber threat in the healthcare industry in the second quarter of 2018.