Counseling and Recovery Services of Oklahoma

Counseling and Recovery Services of Oklahoma reported to HHS on 2023-10-19 a Hacking/IT Incident (email phishing attack) affecting approximately 3,365 individuals. An employee was the subject of a phishing attack that compromised PHI stored in Email systems, including names, addresses, dates of birth, Social Security numbers, lab results, and diagnoses. The CE notified HHS, affected individuals, and the media, implemented new administrative and technical safeguards, and retrained staff in email security.