Omaha Firefighters Healthcare Trust

The covered entity (CE), Omaha Firefighters Healthcare Trust, reported that an employee was the target of an email phishing scheme that compromised the protected health information of approximately 3,567 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, claims information, and diagnoses/conditions. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE retrained employees regarding phishing emails and cybersecurity measures, reset passwords, revised its password policies, and instituted weekly audit logs to better protect its PHI.