Orange County Radiation Oncology Medical Group

Orange County Radiation Oncology Medical Group, the covered entity (CE) reported that employees of its business associate (BA) were the targets of an email phishing scheme that impacted the protected health information (PHI) of 1,911 individuals. The PHI involved demographic and treatment information. The BA notified HHS, affected individuals, and the media on behalf of the CE. OCR provided technical assistance regarding the HIPAA Rules. In its mitigation efforts, the CE and BA implemented additional administrative, technical, and security safeguards to better protect sensitive data.