The covered entity (CE), University of Utah, reported that multiple employees were the victims of an email phishing attack affecting the protected health information (PHI) of 6,606 individuals. This case was consolidated into an existing compliance investigation.
