Cancer Treatment Centers of America in Atlanta discloses three phishing incidents in 6 months

The Cancer Treatment Centers of America (CTCA) has had its name cross my desk a lot this past year. And that’s not a good thing. There have been five Cancer Treatment Centers of America breach notices that have been publicly disclosed since November 2018. Three of them involved the Southeastern Regional Medical Center in Atlanta, Georgia.


In November 2018, CTCA at Western Regional Medical Center in Phoenix, Arizona notified HHS that 41,948 patients were potentially affected by a phishing incident that occurred in May 2018.


In May 2019, CTCA at Southeastern Regional Medical Center in Georgia notified HHS that 16,819 patients were being notified of a phishing incident that occurred in March 2019.


Two months later, CTCA at Eastern Regional Medical Center in Philadelphia, Pennsylvania notified HHS that 3,904 patients were being notified of a phishing incident that occurred in May. And on the same day, Southeastern Regional Medical Center in Atlanta also notified HHS of yet another phishing incident that they had experienced. This one reportedly impacted 4,559 patients.


On September 27, two months after their second report, CTCA at Southeastern Regional Medical Center notified HHS of yet a third incident involving phishing. This one potentially impacted 4,559 patients.


CTCA’s home page for Atlanta’s hospital shows links to two breach notices. Can the third be far behind?

Not seeing the third breach listed on their web site, DataBreaches.net reached out to CTCA at Southeastern Regional Medical Center to confirm that the third incident really was a new incident and not just a revi ..

Support the originator by clicking the read the rest link below.