St. Louis University High School

St. Louis University reported that several employees were the victims of an email phishing scheme affecting approximately 3,100 individuals. The protected health information (PHI) involved included names, dates of birth, Social Security numbers, addresses, diagnoses/conditions, medications prescribed, lab results, and other treatment information. The University notified HHS, the FBI, the media, and affected individuals. In response, the University implemented additional administrative and technical safeguards and trained staff on identifying fraudulent emails.