Providence Health Plan
ent_019e10c7868d0451aeedb20826c84e4b
Disclosures
7
HHS OCR · State AG · 2 jurisdictions
Multi-filing incidents
3
incidents joining 2+ filings here
Max affected reported
122,411
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Providence Health Plan
- Normalized
- providence health plan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493007EJK1KLOJNHH06
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- OREGONHHS OCRas victim2021-06-07
Providence Health Plan reported to HHS on 2021-06-07 a Unauthorized Access/Disclosure affecting 5509 individuals. Breached information located on Email. A temporary contract worker sent emails containing ePHI (names, SSNs, DOB, treatment info) to a personal email address. The CE notified HHS, affected individuals, and the media, and implemented additional technical safeguards.
- Oregon State AGas victim2021-06-04
Providence Health Plan reported a data breach to the Oregon Attorney General. The breach was reported on 2021-06-04. The breach occurred during 3/16/2021 - 3/18/2021, 3/22/2021 - 3/23/2021. The breach was discovered on 3/16/2021. 5,509 individuals were affected.
- Washington State AGas victim2020-06-16
Providence Health Plan (PHP) filed a supplemental notice to the Washington AG regarding a security incident involving its business associate, Zipari. Unauthorized parties accessed unencrypted enrollment documents stored in a misconfigured AWS S3 bucket in May, September, and November 2019. The data included names, dates of birth, and employer plan details. PHP identified 3,324 affected Washington residents. Zipari encrypted the files, conducted forensic audits, and offered credit monitoring.
- OREGONHHS OCRas victim2020-06-16
Providence Health Plan reported to HHS on 2020-06-16 a Unauthorized Access/Disclosure affecting 75,663 individuals. Breached information located on Network Server. A business associate inadvertently posted ePHI (names, DOB, insurance info) to the Internet. CE provided credit/identity monitoring and notified HHS, individuals, and media.
- Oregon State AGas victim2019-08-13
Providence Health Plan reported a data breach to the Oregon Attorney General. The breach was reported on 2019-08-13. The breach occurred during 8/25/2010 - 4/24/2019. The breach was discovered on 4/24/2019. 122,411 individuals were affected. Notice was sent on 8/20/2019.
- OREGONHHS OCRas victim2019-03-19
Providence Health Plan reported to HHS on 2019-03-19 a theft affecting 651 individuals. The incident involved an unencrypted laptop computer containing protected health information that was stolen from an employee of RSC Insurance Brokerage, a business associate. The breached information was located on the laptop and included names, dates of birth, claims information, and clinical information.
- Oregon State AGas victim2019-03-19
Providence Health Plan reported a data breach to the Oregon Attorney General. The breach was reported on 2019-03-19. The breach occurred during 8/23/2018 - 8/23/2018. The breach was discovered on 12/17/2018. 844 individuals were affected.