The Facial Pain Center, a Minnesota healthcare provider, reported a HIPAA breach affecting 1,894 individuals after multiple employees fell victim to an email phishing scheme. Compromised PHI included names, medical record numbers, dates of birth, Social Security and driver's license numbers, financial and health insurance information, email addresses, and treatment information. The entity notified HHS, affected individuals, and media, posted substitute web notice, and implemented additional administrative and technical safeguards.
Affected (this filing): 1,894