Ethan Health, LLC (KY healthcare provider) reported to HHS OCR that several employees fell victim to an email phishing scheme, exposing PHI of 4,047 individuals. Compromised data included names, DOB, SSNs, addresses, claims info, lab results, medications, diagnoses, and other treatment information. The CE notified HHS, affected individuals, media, and posted substitute notice, and implemented additional administrative, technical, and security safeguards.
Affected (this filing): 4,047