News and Analysis

Two employees of Alive Hospice in Tennessee fell for phishing attacks, potentially breaching patient data for up to four months. Unauthorized access to two employee email accounts was discovered in May, containing highly sensitive information such as social security numbers and medical histories. While there is no evidence the data was accessed, the breach highlights the need for continuous monitoring of systems. Alive Hospice is working to help impacted patients and has added additional security features. Notification letters were sent to affected patients on July 13.