Smith Dental Care

Smith Dental Care, the covered entity (CE), reported that on September 28, 2018, it discovered that a workforce member’s credentials were compromised by an unauthorized individual through an email phishing campaign. The CE determined that the protected health information (PHI) of 5,000 individuals was involved in the breach, including names, telephone numbers, and email addresses. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE improved technical safeguards and retrained workforce members. OCR obtained assurances that the CE implemented the corrective actions listed above and provided technical assistance on the requirements of the Breach Notification Rule.