Partners For Quality

The covered entity (CE), Partners for Quality, reported that the email accounts of three employees were accessed by an unauthorized individual after a phishing attack. The breach included the protected health information (PHI) of approximately 3,700 individuals. The PHI involved included names, dates of birth, social security numbers, other demographic information, financial information, and clinical information. Following the breach, the CE implemented multifactor identification for its email system and increased its cybersecurity training. Additionally, OCR provided technical assistance to the covered entity regarding its risk management plan.