Family Physicians of Winter Park, Inc.

Family Physicians of Winter Park, Inc., a Kentucky-listed healthcare provider, reported to HHS OCR on 2019-01-08 that an employee fell victim to an email phishing attack, exposing the ePHI of 8,429 patients. Information involved included names, dates of birth, provider names, and health insurance information. The covered entity notified HHS, affected individuals, and the media; sanctioned the responsible employee; retrained all staff on email security; and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Breach Notification Rule. No business associate was involved.

Affected (this filing): 8,429