Elara Caring notified Massachusetts residents of a data security incident involving unauthorized access to employee email accounts via phishing. The actor redirected employee paychecks and accessed patient files containing personal information. Elara terminated access, reset credentials, and engaged external experts. Affected data includes identity and financial information. No specific count was provided in this notice.