Saint Louis University staff members in the US have fallen victim to a sophisticated phishing scam. The protected health information of 3,000 patients may have been compromised.
According to SLU, the phishing emails were sent on July 25, leading some employees to provide their account details to cybercriminals. The incident was discovered on August 8.
After an extensive investigation, it was found that twenty of the universitycontained the personal health information of 3,000 people. The Social Security numbers of 200 people were also included.
“At this time, all evidence indicates that the primary target of the attack was the financial information of university employees who received the phishing email. Several colleges and universities have been similarly targeted in recent months,” SLU said.
Individuals affected by the attack will receive one year of free monitoring of their deposit movements and free protection services against online threats.
