The U.S. Department of Health and Human Services (HHS) has announced a $600,000 settlement with an entity covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) following a phishing attack. The settlement involves PIH Health, Inc., a California-based health network. 

The HHS Office of Civil Rights (OCR) began investigating the incident after receiving a report in January…