The covered entity (CE), Health Alliance Plan reported that an employee was the target of an email phishing incident that affected the protected health information (PHI) of 1,059 individuals. The PHI involved demographic information. The CE notified HHS, the affected individuals, and the media, and provided substitute notice. In response to the breach, the CE retrained workforce members to better protect its PHI.
