Bardmoor Cancer Center

Bardmoor Cancer Center, the covered entity (CE), reported that multiple employees of its business associate (BA) were the targets of an email phishing scheme that resulted in unauthorized access to the protected health information (PHI) of 991 individuals. The PHI involved clinical, demographic, and financial information. The CE notified affected individuals, the media and HHS. In its mitigation efforts, the BA changed passwords, strengthened password requirements, and provided training to its workforce.