Memorial Hermann Health System Employee Group Health Plan

Memorial Hermann Health System (on behalf of its Employee Group Health Plan) reported to HHS OCR on 2016-07-20 an unauthorized disclosure affecting 12,061 plan members. Between December 12, 2015, and May 23, 2016, plan administrator Memorial Hermann Health Solutions impermissibly disclosed PHI — including names, addresses, dates of birth, phone numbers, and member IDs — to primary care physicians with whom members had no existing care relationship. The error originated from a new process implemented in 2014 that was not effectively communicated to Health Plan leadership. Breached information was on Paper/Films.