Tri-Cities Chaplaincy

The covered entity (CE), Tri-Cities Chaplaincy (TCC), reported that an employee’s email account had been compromised by a phishing scheme. This breach affected approximately 1,086 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, phone numbers, diagnoses/conditions, medications, partial social security numbers, medial record numbers, and other treatment information. The CE notified affected individuals, the media, and HHS. Following the breach, TCC reset the access credentials on the compromised account, implemented additional security safeguards, retrained employees on privacy and security requirements, and revised its policies and procedures. OCR provided the CE with technical assistance regarding its security management process.