CKF Addiction Treatment

The covered entity (CE), CKF Addiction Treatment, reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 2,946 individuals. The PHI involved included names, addresses, birthdates, diagnoses, claims information, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE strengthened its administrative, technical, and security safeguards.