Performance Physical Therapy and Wellness, a Connecticut healthcare provider, reported a phishing incident that led to unauthorized access to employee email accounts, exposing PHI of 571 individuals. The entity notified HHS and affected individuals, offered free credit monitoring, retrained employees, updated policies, implemented technical safeguards, and retained a third party to investigate and provide recommendations. OCR obtained assurances of corrective action.
Affected (this filing): 571