Kent County Community Mental Health Authority

The covered entity (CE), Kent County Community Mental Health Authority, reported that multiple staff members were the victims of an email phishing scheme that compromised the protected health information (PHI) of 2,284 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, diagnoses, lab results, medications, and other treatment information. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. In addition, the CE retrained its workforce members on the proper methods of identifying fraudulent email communications.