SEES Group, LLC, the business associate (BA), reported that several employees of its covered entity (CE) were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 13,000 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses/conditions, and other treatment information. The BA notified HHS, affected individuals, and the media. The BA offered free credit monitoring services to affected individuals.
