Blue Cross & Blue Shield of Rhode Island
bd_2244dd9cb6775e88 · schema v1 · pii pii-v1
Full breach record for Blue Cross & Blue Shield of Rhode Island →On January 5, 2010, Blue Cross Blue Shield of RI (BCBSRI) was notified that a 16-page report pertaining to Brown University's health plan was impermissibly disclosed to two other BCBSRI agents. The report contained the protected health information of approximately 528 individuals, including first and last names, dates of service, cost of medical care, and member identification numbers. In response, BCBSRI recovered the reports, received assurances that electronic copies were deleted, notified affected individuals, implemented new procedures for correspondence, and began auditing affected members' claim histories.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Feb 16, 2010
- Raw hash
- b307dddd9a4158883d4c3dbb269e84b63bbf5ada86dff0d0cafa0a9c62474350
Source filing
Reporting entity
- Name
- Blue Cross & Blue Shield of Rhode Islandnorm: blue cross blue shield of rhode island
- Domain
- bcbsri.com
- Industry
- Business Associate
Victim entity
- Name
- Blue Cross & Blue Shield of Rhode Islandnorm: blue cross blue shield of rhode island
- Domain
- bcbsri.com
- Industry
- Business Associate
- Industry
- Healthcaresource default
Incident
- Discovered
- Jan 5, 2010
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 528
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jan 5, 2010→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.