norm: cemexUSLEI 549300JHGUF0VVA38719 · no CIKMax severity: Medium

Canonical registry

CEMEX, Inc.

ent_019e1069bf677bee25b7fff9af1293e7

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

880

as filed · HHS OCR TX

Leak-site claims

0

none in sample

Identity resolution

Canonical name: CEMEX, Inc.
Normalized: cemex— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300JHGUF0VVA38719
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

TEXASHHS OCRas victim2015-04-27
CEMEX, Inc. (TX, self-insured health plan) reported to HHS OCR on 2015-04-27 that 880 individuals' ePHI was exposed via its business associate Blue Cross and Blue Shield of Texas, which stored CEMEX ePHI on servers of BCBSTX's parent Anthem, Inc. Anthem suffered a series of cyberattacks that exposed ePHI of nearly 79 million people. Data exposed included names, SSNs, medical IDs, addresses, dates of birth, email addresses, and employment information. OCR found the BA agreement compliant; a separate OCR review of Anthem led to a monetary settlement and corrective action plan.