Choice Health Insurance, LLC

Choice Health Insurance, LLC (a covered entity) reported a Hacking/IT Incident at its business associate that exposed PHI of 14,307 individuals on a network server. Affected data included names, addresses, dates of birth, and Social Security numbers. The CE and BA implemented additional administrative and technical safeguards and retrained staff; HHS, affected individuals, and media were notified.

Choice Health Insurance, LLC notified the NH AG of a data breach affecting one NH resident. An unauthorized individual accessed a database on May 7, 2022, due to misconfigured security settings by third-party vendor Boru, Inc. Data included names, SSNs, Medicare IDs, DOB, and health info. Notification sent June 8, 2022.

Choice Health Insurance, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-06-08. The breach occurred during 5/7/2022 - 5/7/2022. The breach was discovered on 5/18/2022. 68,170 individuals were affected. Notice was sent on 6/8/2022.

Choice Health Insurance, LLC experienced a data breach due to a technical security configuration issue caused by a third-party service provider, which made a database accessible via the Internet. An unauthorized individual accessed the database on May 7, 2022, obtaining files containing names, SSNs, Medicare IDs, DOBs, addresses, and health insurance information. Choice Health discovered the incident on May 14, 2022, when an unauthorized person offered the data for sale. The company reconfigured security settings, confirmed the database was no longer accessible, and implemented MFA. Affected individuals were offered 24 months of Experian IdentityWorks.

Choice Health Insurance, LLC notified Montana residents of a data breach where an unauthorized individual accessed a database via the internet on May 7, 2022. The incident resulted from a misconfiguration by a third-party provider. Data exposed included names, SSNs, Medicare IDs, DOBs, and health insurance info. Choice Health contained the breach, enhanced security with MFA, and offered 24 months of Experian IdentityWorks.

Choice Health Insurance, LLC notified South Carolina residents of a data breach where an unauthorized individual accessed a database via the internet on May 7, 2022. The incident resulted from a security configuration issue by a third-party provider. Exposed data included names, SSNs, Medicare IDs, DOBs, addresses, and health insurance info. Choice Health contained the breach, enhanced security with MFA, and offered 24 months of Experian IdentityWorks.

Choice Health Insurance, LLC reported a data breach affecting 1,844 Washington residents. Unauthorized access occurred on May 7, 2022, via a third-party service provider's misconfigured database. Personal information including names, SSNs, Medicare IDs, DOBs, and health insurance data was accessed. The incident was discovered on May 14, 2022, and notifications were sent on June 8, 2022. Remediation included MFA implementation and credit monitoring offers.

Choice Health Insurance, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-06-08. 14 Massachusetts residents were affected. The report records the breach type as electronic.

Choice Health Insurance, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-05-07 and was reported on 2022-06-08. 1,084 Indiana residents were affected. 68,170 individuals affected in total.

CHOICE HEALTH INSURANCE filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-382). The register records the breach as discovered on May 14, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.