Penn-Mar Human Services, a Maryland healthcare provider, reported that an employee fell victim to an email phishing scheme that exposed PHI of 536 individuals, including names, Social Security numbers, medications prescribed, and other treatment information. The entity notified HHS, affected individuals, and the media; offered complimentary credit monitoring and identity theft services; implemented additional safeguards; and retrained workforce on email security.
Affected (this filing): 536