Cytometry Specialists

The covered entity (CE), Cytometry Specialists, Inc. dba CSI Laboratories, reported that an employee was the victim of a phishing attack that compromised the protected health information (PHI) of 244,850 individuals. The PHI involved included names, addresses, dates of birth, and health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE strengthened its administrative and technical safeguards and retrained its staff on email security. OCR provided the CE with technical assistance regarding the HIPAA Breach Notification Rule.