City of Lincoln Aging Partners, a HIPAA business associate in Nebraska, reported an email phishing attack that compromised PHI of 1,513 individuals. Exposed data included names, addresses, dates of birth, Social Security numbers, financial information, diagnoses, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice; it also implemented additional administrative and technical safeguards. OCR provided technical assistance on HIPAA Security Rule obligations.
Affected (this filing): 1,513