Healthcare Therapy Services, Inc.

Health Therapy Services, the covered entity CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 15,027 individuals. The PHI included clinical, financial and demographic information. The CE notified HHS, the affected individuals, the media and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional technical, administrative and security safeguards, updated its HIPAA policies and procedures, and retrained staff.