St. John’s Riverside Hospital

St. John’s Riverside Hospital, the covered entity (CE), reported that several employees were the targets of an email phishing scheme that compromised the protected health information (PHI) of 2,238 individuals. The PHI involved clinical and demographic information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE revised its policies and procedures regarding the HIPAA Privacy and Security Rules and trained or retrained its workforce. OCR provided technical assistance to the CE.