Metropolitan Atlanta Rapid Transit Authority

Metropolitan Atlanta Rapid Transit Authority (MARTA), acting on behalf of its self-insured health plan, reported to HHS on 2015-08-27 an Unauthorized Access/Disclosure affecting 800 individuals. MARTA mailed 785 Voluntary Critical Illness Insurance forms to incorrect employees; correspondence contained PHI including names, addresses, SSNs, and dates of birth. Breached information located on Paper/Films. MARTA notified HHS, affected individuals, and media, and implemented corrective SOPs and staff training. OCR obtained assurances that corrective actions were implemented.