Native American Rehabilitation Association of the Northwest

Native American Rehabilitation Association of the Northwest, Inc., the covered entity (CE), reported that numerous employees were the victims of an email phishing attack that affected the electronic protected health information (ePHI) of approximately 25,187 individuals. The ePHI involved included names, addresses, Social Security numbers, birthdates, and diagnoses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE retrained its staff and implemented additional administrative and technical safeguards.