AccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedPHIGovernment IDIdentity (basic)MediumResolved

Group Health Cooperative

bd_2c9925df8faa3ff9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 13, 2016

Filed

Nov 30, 2016

To disclose

7 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Group Health Cooperative →5 incidents on file

Group Health, Inc. (an EmblemHealth company) disclosed an unintentional release of protected health information and Social Security numbers. On October 13, 2016, the company learned that Health Insurance Claim Numbers (HICNs), which mirror Social Security numbers, were inadvertently included on external mailing labels of Medicare Evidence of Coverage documents sent between October 3 and October 14, 2016. The error occurred when a vendor mistakenly used HICNs instead of random mailing identifiers. The company offered 24 months of identity protection services via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 10 days

discovery → filing · 7 weeks / 48 days

Oct 3, 2016

Begins

Oct 13, 2016

Discovered

Nov 30, 2016

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Group Health Cooperative
norm: group health cooperative

Name: Group Health Cooperative
norm: group health cooperative
Industry: HealthcarellmFinancial Servicesllm

Discovered: Oct 13, 2016
Breach occurred: Oct 3, 2016 – Oct 14, 2016
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unknown
Third party: via EmblemHealth vendor

During the incident: Arranged to have AllClear ID protect your identity for 24 months at no cost
Provided free credit monitoring
Provided up to $1 million of identity theft insurance coverage
Provided dedicated helpline for questions
Changes made: Taking action to reduce the likelihood of this happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-65120
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2016
Raw hash: f420b96e11bde3e5558a795a52f6c37403df0e8e07c170339cf158974f29925c

Reporting entityGroup Health Cooperative

Victim entityGroup Health Cooperative

Incidentdiscovered Oct 13, 2016

Stated responseArranged to have AllClear ID protect your identity for 24 months at no cost

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov