Worldwide Insurance Services

An unauthorized user gained access to employees’ email account after a phishing attack. The breach included the protected health information (PHI) of 1,692 individuals including patients’ names, dates of birth, social security numbers, claims information, clinical information, and financial information. Following the breach, the covered entity upgraded its email encryption software, implemented multi-factor authentication for its email accounts, and trained employees on phishing emails and cyber threats. Additionally, OCR provided technical assistance on timely breach notifications.