Health Care Service Corp

Health Care Service Corporation (IL), a Health Plan, reported to HHS OCR on 2025-04-13 an Unauthorized Access/Disclosure breach affecting 2,944 individuals. Breached information was located on an 'Other' medium. No business associate was identified as involved. No further detail is available from the HHS web description.

Health Care Services Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-30 and was reported on 2023-08-21. 131 Indiana residents were affected. 192,231 individuals affected in total.

Health Care Service Corporation reported to HHS on 2023-08-21 a Hacking/IT Incident affecting 220,913 individuals. Breached information located on Network Server. A business associate experienced a cyber-attack compromising PHI including names, addresses, SSNs, and claims data.

Health Care Service Corporation (HCSC), a health plan based in IL, reported to HHS on 2021-06-15 a Hacking/IT Incident affecting 543 individuals. A vendor of its business associate experienced a cyber-attack that compromised PHI, including names, birthdates, diagnoses, claims information, and other treatment information, located on a Network Server. HCSC notified HHS, affected individuals, the media, and posted substitute notice. The CE and BA implemented additional safeguards and retrained all staff.

Blue Cross and Blue Shield of Montana disclosed that on January 21, 2021, Protected Health Information (PHI) including names, DOBs, and claim numbers was inadvertently sent to the wrong recipient due to a processor error. The recipient was asked to destroy the data. No misuse was detected.

Health Care Service Corporation reported to HHS on 2020-03-23 a Unauthorized Access/Disclosure affecting 574 individuals. Breached information located on Email. An employee inadvertently emailed ePHI (names, diagnoses, medications) to an unauthorized individual. The CE implemented administrative safeguards and retrained employees.

Health Care Service Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2019-08-16 and was reported on 2020-02-20. 1 Indiana residents were affected. 6 individuals affected in total.

HEALTH CARE SERVICE CORPORATION filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-106). The register records the breach as discovered on December 12, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTH CARE SERVICE CORPORATION filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-156). The register records the breach as discovered on January 16, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTH CARE SERVICE CORPORATION filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-112). The register records the breach as discovered on February 6, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Health Care Service Corporation (HCSC), an Illinois-based Health Plan, reported to HHS on 2019-09-06 an Unauthorized Access/Disclosure affecting 998 individuals. Business associate Universal Printing Company (UPC), a sub-BA of TMG Health, Inc., mismatched PHI and mailed it to wrong recipients. Breached information was on Paper/Films. HCSC notified HHS, affected individuals, the media, and posted substitute notice. TMG implemented additional administrative safeguards; OCR obtained assurances of corrective action.

Health Care Service Corporation (IL, Health Plan) reported to HHS on 2019-04-24 an Unauthorized Access/Disclosure affecting 1,182 individuals. Due to a coding error, PHI including names and diagnoses was impermissibly disclosed via an Other Portable Electronic Device. The CE corrected the coding error, revised policies and procedures, and retrained employees. Affected individuals were notified.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-493). The register records the breach as discovered on October 24, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-298). The register records the breach as discovered on March 29, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-297). The register records the breach as discovered on March 1, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-320). The register records the breach as discovered on March 25, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-408). The register records the breach as discovered on June 13, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-294). The register records the breach as discovered on December 20, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-287). The register records the breach as discovered on April 20, 2017. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP. filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-038). The register records the breach as discovered on August 14, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-403). The register records the breach as discovered on June 13, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-363). The register records the breach as discovered on June 12, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP. filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-032). The register records the breach as discovered on July 9, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-494). The register records the breach as discovered on October 30, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HEALTHCARE SERVICE CORP. filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-112). The register records the breach as discovered on December 14, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.