University of Michigan/Michigan Medicine

University of Michigan-Michigan Medicine, the covered entity (CE), reported that one of its employees was the target of an email phishing scheme affecting the protected health information (PHI) of 56,953 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, conditions, and claims information. The CE notified HHS, affected individuals, and the media. The CE took several corrective actions in response to the breach including implementing additional technical safeguards and providing HIPAA training to its work force members.