Scenic Bluffs Health Center

The covered entity (CE), Scenic Bluffs Community Health Center, Inc., reported that it was a victim of an email phishing scheme. This breach affected approximately 2,889 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, social security numbers, and diagnoses/conditions. As a result, the CE implemented administrative, technical, and security safeguards to prevent future phishing attacks. The CE also retrained its staff. The CE notified affected individuals, OCR, and the media. OCR obtained assurances that the CE implemented the corrective actions noted above.