Reliant Rehabilitation, a business associate (BA), reported that a workforce member was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 614 individuals. The ePHI involved included names, dates of birth, diagnoses, treatment information, health insurance information, and Social Security numbers. The BA notified HHS, affected individuals, and the media. As a result of the breach, the BA retrained its workforce members on the proper methods of recognizing and responding to fraudulent email communications and strengthened its administrative safeguards.
