AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/hipaa-phishing-breach-scenario

Leah gets an email asking her to log in to a strange link to keep her account. What should she do?

Start playing free

  1. Click the link to check if it is real
  2. Don't click, and report it to IT or security
  3. Reply with her username so they can verify her

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Healthcare Worker Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. 45 CFR 164.308(a)(5) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308 Checked 2026-10-10.
  2. 45 CFR 164.308(a)(5)(ii)(B) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308 Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Healthcare Privacy (HIPAA)Which HIPAA security awareness topic covers phishing emails?Healthcare Privacy (HIPAA)What should you do if you suspect a breach?Healthcare Privacy (HIPAA)Does HIPAA protect patient information that is spoken out loud, or only paper and computer records?

That's stuff everyone should know.