Mille Lacs Health System

Mille Lacs Health System (MLHS), the covered entity (CE), reported that several employees were the victims of an email phishing scheme that affected the protected health information (PHI) of 10,630 individuals. The PHI involved included names, addresses, Social Security numbers, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE provided complimentary credit monitoring and identity theft restoration services to affected individuals. In its mitigation efforts, MLHS implemented additional administrative and technical safeguards to better protect its PHI. All employees were retrained on the proper methods of identifying fraudulent email communications.