Englewood Health

The covered entity (CE), Englewood Health, reported that an employee of its business associate (BA) was the victim of an email phishing attack affecting the protected health information (PHI) of 582 individuals. The PHI involved included birthdates and financial information. The CE notified HHS; the BA notified affected individuals and the media. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to protect PHI. The CE has since terminated its business associate agreement with the BA.