Friendship Community Care, Inc., an Arkansas healthcare provider, reported to HHS OCR on 2020-06-22 that several employees fell victim to an email phishing scheme, exposing the ePHI of 10,845 individuals. Affected data included names, dates of birth, addresses, driver's license information, Social Security numbers, diagnoses, health insurance information, facial photographs, and medications prescribed. The CE implemented additional administrative, technical, and security safeguards and retrained its workforce; OCR obtained assurances that corrective actions were implemented.
Affected (this filing): 10,845