OE Enterprises

The business associate (BA), OE Enterprises, reported that employees were the victims of an email phishing attack affecting the protected health information (PHI) of 2,224 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, diagnoses, and medications. The BA notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the BA implemented additional technical safeguards, revised its policies and procedures, and provided training to its workforce.