Bonita Springs Retirement Village

The covered entity (CE), Bonita Springs Retirement Village, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 554 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, addresses, health insurance and financial information, medications, and diagnoses and conditions. The CE notified HHS and affected individuals. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance to the CE pertaining to the HIPAA Security and Breach Notification Rules.