Phishing attack nabs hospital employees’ W-2 info

Citizens Memorial is not notifying the HHS Office for Civil Rights about the incident because W-2 forms are not protected health information under the HIPAA breach notification rule