Jewish Home Lifecare

The covered entity (CE), Jewish Home Lifecare dba The New Jewish Home, reported that an employee was the victim of an email phishing attack affecting the protected health information (PHI) of 2,091 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses, lab results, and medications prescribed. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional technical safeguards, revised its policies and procedures, sanctioned the employee responsible for the breach, and retrained its employees on email security.