Tower Clock Eye Center

The covered entity (CE), Tower Clock Eye Center, reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of approximately 10,737 individuals. The PHI involved names, addresses, dates of birth, drivers’ license and social security numbers, claims and financial information, diagnoses, conditions, lab results, and medications. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.