Nemadji Research Corporation, a business associate for the County of Los Angeles providing patient eligibility and billing services, experienced a data breach on March 28, 2019. An employee fell victim to a phishing email, compromising one email account used for County Department of Health Services communications. Personal and health information (PHI) of patients may have been exposed. Nemadji notified the FBI, CA AG, and HHS OCR, and offered one year of identity monitoring via Kroll.