Sacred Heart Rehabilitation Center, Inc.

Sacred Heart Rehabilitation Center (MI) reported to HHS OCR on 2019-01-10 a Hacking/IT Incident — email phishing scheme — affecting 2,266 individuals. Several employees were victims of a phishing attack; PHI exposed included names, addresses, Social Security numbers, health insurance information, lab results, diagnoses, and treatment information. Breached information was located in Email. The CE offered credit monitoring, set up a call center, retrained staff on phishing identification, and implemented additional administrative and technical safeguards. OCR obtained assurances of corrective action.