Bronx Addiction Services Integrated Concepts Systems

The covered entity (CE), Bronx Addiction Services Integrated Concepts Systems, Inc., reported that an employee was the victim of an email phishing attack affecting the protected health information (PHI) of 823 individuals. The PHI involved included names, dates of birth, Social Security numbers, and health insurance and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. The CE also provided affected individuals with complimentary credit monitoring services. In response to the breach, the CE implemented additional technical safeguards and retrained its staff on email security.