Childrens Hope Alliance

The covered entity (CE), Children’s Hope Alliance, reported that it was a victim of a phishing attack that affected the electronic protected health information (ePHI) of 4,564 individuals. The ePHI involved included names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, clinical information, and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and implemented additional administrative and technical safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule.