Community Link

The covered entity (CE), Community Link, Inc., reported that it was the victim of an email phishing scheme. The compromised account contained the protected health information (PHI) of 5,524 individuals. The PHI involved included names, Social Security numbers, member identification numbers, and claims data. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE immediately deployed additional administrative, security, and technical safeguards to better protect its PHI and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.