FEDERALAccidentalHealthcareHealthcarePublishing ErrorBusiness Associate (HIPAA)Customer Data InvolvedHEALTH_BASICIDENTITY_BASICPHIMediumResolved
Independence Blue Cross, LLC
bd_4d663777a6ddae6d · schema v1 · pii pii-v1
Full breach record for Independence Blue Cross, LLC →On July 19, 2018, Independence Blue Cross, LLC learned that an employee had uploaded a file containing demographic, clinical, and health claims information for approximately 16,762 subscribers to a public-facing website. The file was accessible from April 23, 2018, to July 20, 2018. The company removed the file, initiated an investigation, notified affected individuals, and offered credit monitoring services.
HIPAA clock✓ HHS notified9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16,762 affectedView incident
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Sep 17, 2018
- Raw hash
- 237751192c81fec8410f6f482c9251f29cff8d72bb10fe8beacc6e9f7bcb98ce
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Independence Blue Cross, LLCnorm: independence blue cross
- Domain
- ibx.com
- Industry
- Business Associate
Victim entity
- Name
- Independence Blue Cross, LLCnorm: independence blue cross
- Domain
- ibx.com
- Industry
- Business Associate
- Industry
- Healthcaresource default
Incident
- Discovered
- Jul 19, 2018
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 16,762
- Data types
- HEALTH_BASICIDENTITY_BASICPHI
- Attack vector
- Unauthorized Access
- Threat actor
- Internal
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jul 19, 2018→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.