Pace Center for Girls

The covered entity (CE), Pace Center for Girls, reported that employees were the victims of an email phishing attack that affected the protected health information (PHI) of 18,300 individuals. The PHI involved included names, addresses, phone numbers, dates of birth, and medication information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response, the CE provided training to its staff on the threat of phishing emails and implemented additional technical safeguards to better protect PHI.