Ijaola

The covered entity (CE), Ijaola dba Mercy Grace Private Practice, reported that several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 4,450 individuals. The PHI involved included names, drivers’ license numbers, Social Security numbers, financial information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE also provided complimentary identity theft and credit monitoring services. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its PHI.