Hastings, Neb.-based Wabi Sabi Behavioral Health Center identified unauthorized access to parts of its network containing employee payroll records after a third party accessed an account using compromised credentials, The HIPPA Journal reported July 8.
Here are three things to know:
- On June 15, the attacker sought to change employees’ account details to redirect payroll payments to attacker-controlled accounts. The unauthorized access was detected the same day, and payroll changes were identified.
- Wabi Sabi said employee information, including names, addresses and Social Security numbers, may have been viewed or copied. The affected accounts have since been secured, and affected employees have been notified and offered complimentary credit monitoring and identity theft protection services.
- The organization has not identified any misuse of employee data related to the incident. The Nebraska attorney general was notified of the breach, though the number of affected individuals has not been publicly disclosed, according to the report.
At the Becker's Fall Behavioral Health Summit, taking place November 4–5 in Chicago, behavioral health leaders and executives will explore strategies for expanding access to care, integrating services, addressing workforce challenges and leveraging innovation to improve outcomes across the behavioral health continuum. Apply for complimentary registration now.
