Gateway Health Plan

Gateway Health Plan, the covered entity (CE), reported that numerous employees its business associate (BA), National Imaging Associates, Inc., were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 753 individuals. The ePHI involved included names, member identification numbers, and treatment information. In its mitigation efforts, the BA implemented additional technical safeguards and retrained its employees on the proper methods of identifying fraudulent email communications. The CE provided complimentary credit monitoring services to all affected individuals.