Peregrine

Peregrine Corporation dba PSL Services, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 2,401 individuals. The PHI involved included names, dates of birth, addresses, drivers’ license numbers, clinical information, financial information, and Social Security numbers. The CE notified HHS, affected individuals, the media, and provided complimentary identity theft and restoration services. Following the breach, the CE implemented additional technical safeguards. As a result of OCR’s investigation, PSL provided updated copies of policies and procedures regarding breach notification, risk assessment, use and disclosures of PHI, and safeguarding PHI.