norm: elderplanno LEI · no CIKMax severity: High

Canonical registry

Elderplan, Inc.

ent_2a85c174e389c8334d782329

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

65,235

as filed · HHS OCR NY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Elderplan, Inc.
Normalized: elderplan— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NEW YORKHHS OCRas victim2017-08-05
Elderplan, Inc. (NY-based health plan) reported that several employees fell victim to an email phishing scheme, exposing ePHI of 65,235 individuals. Affected data included names, health insurance information, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media; implemented additional administrative, technical, and security safeguards; and retrained workforce on identifying phishing emails. OCR obtained assurances of corrective actions.