Elderplan, Inc.
ent_2a85c174e389c8334d782329
Disclosures
2
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
65,235
nationwide · HHS OCR NY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Elderplan, Inc.
- Normalized
- elderplan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- Massachusetts State AGas victim2017-10-16
Elderplan Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-10-16. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- NEW YORKHHS OCRas victim2017-08-05
Elderplan, Inc. (NY-based health plan) reported that several employees fell victim to an email phishing scheme, exposing ePHI of 65,235 individuals. Affected data included names, health insurance information, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media; implemented additional administrative, technical, and security safeguards; and retrained workforce on identifying phishing emails. OCR obtained assurances of corrective actions.