norm: national dcp health planno LEI · no CIKMax severity: High

Canonical registry

National DCP Health Plan

ent_1c41b22f73d4182906feeb41

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

1,190

as filed · HHS OCR GA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: National DCP Health Plan
Normalized: national dcp health plan— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

GAHHS OCRas victim2017-08-08
In March 2017, an employee of National DCP Health Plan (GA, Health Plan) followed a link in a phishing email, resulting in an unauthorized external actor accessing her email account. PHI exposed for 1,190 individuals included health plan enrollment data: names, addresses, SSNs, and dates of birth. The CE notified HHS, affected individuals, and posted notice on its website; it also reported to the FBI and Secret Service. OCR investigated and obtained assurances that the CE implemented MFA for email, improved inbound email safeguards, and conducted phishing awareness training for its workforce. Breached information located on Email.