Hebrew Home of Greater Washington (MD healthcare provider) reported that an employee fell victim to an email phishing attack, exposing ePHI of 5,693 individuals. Compromised data included names, addresses, dates of birth, driver's license numbers, Social Security numbers, financial information, diagnoses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice, implemented additional technical safeguards, and retrained staff. OCR confirmed implementation of corrective actions.
Affected (this filing): 5,693