PET Imaging of Tulsa

The covered entity (CE), PET Imaging of Tulsa, reported that employees of its business associate (BA) were the targets of an email phishing scheme that affected the protected health information (PHI) of 3,159 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, and confirmed that its BA notified the affected individuals, the media, and posted substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, and the CE and BA implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI