EyeSouth Partners

EyeSouth Partners is the business associate (BA) for Cobb Eye Center, South Georgia Eye Partners, Georgia Eye Associates, and Georgia Ophthalmology, the covered entities (CEs). On October 25, 2018, the BA discovered that an unauthorized third party gained access to an employee’s email account from September 11, 2018, through October 25, 2018. Via a forensic investigation, on December 19, 2018, the BA identified four email attachments that contained protected health information (PHI) belonging to the CEs. The breach affected 24,113 individuals' PHI and included demographic and claims information. The BA provided breach notification to HHS, to the media, and to the affected individuals. The BA also provided the CEs with web notification that the CEs timely posted to their websites. In response to the breach, the BA changed the employee’s email account password, quarantined his computer, reviewed all parts of its computer server that the employee's computer could access, implemented dual factor authentication, deployed new software for spam filtering and malware, reset controls on its email tenant, and improved safeguards for logins to email accounts. The BA also provided training to