The covered entity (CE), Temple University Health System, reported that an employee of its business associate (BA), Nemadji Research Corporation, was the victim of an email phishing attack affecting 2,339 individuals. The PHI involved included names, dates of birth, Social Security numbers, claims information, and treatment information. In its mitigation efforts, the CE and BA implemented additional technical safeguards to better protect its PHI.