Barclay Damon LLP

The business associate (BA), Barclay Damon, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of 1,039 individuals. The PHI involved included names, drivers’ license and/or state identification numbers, diagnoses, medications, claims and financial information, and health insurance and other treatment information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards and retrained its staff on email security.