Beatitudes Campus

The covered entity (CE), Beatitudes Campus, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 5,316 individuals. The ePHI involved included names, Social Security numbers, diagnoses, and conditions. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services and a toll-free phone number for questions or concerns. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards a retrained its staff. During the investigation, OCR provided technical assistance to the CE and obtained assurances that the CE implemented the corrective actions.