CoreLink Administrative Solutions

The business associate (BA), CoreLink Administrative Solutions, LLC, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 1,813 individuals. The ePHI involved included names, birthdates, Social Security numbers, addresses, and health insurance information. The BA notified HHS and the media; the CE notified affected individuals. In its mitigation efforts, the BA implemented additional administrative and technical safeguards and retrained its staff on the proper methods of identifying fraudulent email communications.