Beer Industry - Local Union No. 703 Health and Welfare Fund

Beer Industry – Local Union No. 703 Health and Welfare Fund, the covered entity (CE), reported than an employee was the victim of an email phishing scheme. The email account contained the protected health information (PHI) of 9,279 individuals. The PHI involved included names, addresses, drivers’ license information, Social Security numbers, health insurance information, and financial information. The CE notified HHS, affected individuals, and the media. As a result of this breach incident, the CE implemented additional administrative and technical safeguards and trained its staff on the proper methods of identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.