Calibre CPA Group

Calibre CPA Group, a business associate (BA), reported that several employees were the victims of an email phishing scheme that affected the protected health information (PHI) of 7,937 individuals. The PHI involved included names and Social Security numbers. In its mitigation efforts, the BA implemented numerous administrative, technical, and security safeguards to better protect its sensitive data. Calibre also retrained its staff on the proper methods of identifying fraudulent email communications. During the investigation, OCR provided the BA with technical assistance on the provisions of the Breach Notification Rule. OCR obtained assurances that the BA implemented the corrective actions noted.