Business associate Barclay Damon LLP reported that an employee fell victim to an email phishing scheme compromising the PHI of 1,039 individuals. Exposed data included names, driver's license/state ID numbers, diagnoses, medications, claims and financial information, and health insurance/treatment information. The firm notified HHS, affected individuals, and the media, implemented additional administrative and technical safeguards, and retrained staff on email security.
Affected (this filing): 1,039