The covered entity (CE), Samaritan’s Purse, reported that an employee of its business associate (BA) was subject to an email phishing scheme that affected the protected health information (PHI) of 2,351 individuals. The PHI included names, dates of birth, gender, and benefits information. The CE notified HHS and the affected individuals. In its mitigation efforts, the BA provided free credit protection services.
