Florida Blue

Florida Blue (FL Health Plan) reported to HHS on 2022-02-04 an Unauthorized Access/Disclosure affecting 588 individuals. An employee inadvertently mailed documents containing PHI — including names, addresses, and health insurance and treatment information — to wrong recipients. Breached information located on Paper/Films. The CE notified HHS, affected individuals, the media, and provided substitute notice. The responsible employee was sanctioned and administrative safeguards were strengthened.

Florida Blue reported to HHS on 2021-07-01 a Hacking/IT Incident affecting 32,749 individuals. Breached information located on Network Server. The cyber-attack affected electronic protected health information (ePHI) including names, addresses, emails, DOB, claims, diagnoses, and medications. Florida Blue notified HHS, individuals, and media, and implemented technical safeguards.

Florida Blue (FL Health Plan) reported to HHS on 2017-10-27 an Unauthorized Access/Disclosure affecting 939 individuals. Breached information was on Paper/Films. On August 30, 2017, employees of business associate Alliance & Associates Financial Services, Inc. impermissibly took PHI (names, DOBs, addresses, SSNs, medical history, banking/payment info) to a new employer. The CE recovered the PHI, provided credit monitoring, and OCR opened a separate review of the BA.

BeHealthy Florida, Inc. reported to HHS on 2015-10-19 a Unauthorized Access/Disclosure affecting 835 individuals. Breached information located on Paper/Films. Business associate RR Donnelly inadvertently placed health insurance claim numbers (HICN) containing social security numbers on the outside of envelopes containing benefit information packets mailed to members.