Miracle-Ear, Inc. and Amplifon

Miracle-Ear and Amplifon USA, Inc., business associates (BA) of Best Hearing Products, Inc., the covered entity (CE), reported that an employee of Best Hearing Products, Inc., was the victim of an email phishing scheme that affected the protected health information (PHI) of 554 individuals. The PHI involved included names, dates of birth, addresses, and treatment information. The BA notified HHS, affected individuals, and the media. After the breach, the CE implemented administrative and technical safeguards to better protect its data and retrained its employees on the proper methods of identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.