Lake County Health Department and Community Health Center

The covered entity (CE), Lake County Health Department and Community Health Center, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 5,000 individuals. The PHI involved included names, addresses, dates of birth, phone numbers, email addresses, and diagnoses and conditions. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards and increased staff training.