Pima County

The covered entity (CE), Pima County, reported that an employee of its business associate (BA) Ameritas, was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 1,498 individuals. The ePHI involved included names, birthdates, and Social Security numbers. In its mitigation efforts, the BA implemented additional technical safeguards and retrained its staff on the proper methods of identifying fraudulent email communications. The responsible employee was sanctioned and affected individuals were provided with complimentary credit monitoring services.