Florida Springs Surgery Center

The covered entity (CE), Florida Springs Surgery Center, reported that an employee was the victim of an email phishing attack affecting the protected health information (PHI) of 2,203 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial and health insurance information, diagnoses, conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE strengthened its technical safeguards, provided complimentary credit monitoring services to affected individuals, and retrained its workforce on identifying potential phishing schemes.