Group Health Cooperative

Group Health, Inc., an EmblemHealth company, disclosed an unintentional data breach occurring between October 3 and 14, 2016. Medicare Prescription Drug Plan Evidence of Coverage documents were mailed with members' Health Insurance Claim Numbers (HICN) and names/addresses inadvertently printed on external mailing labels. No health or financial data was disclosed. Affected individuals were offered 24 months of identity protection and credit monitoring through AllClear ID.

Group Health Cooperative, a health sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2016-09-06 and filed notice on 2016-09-23. 651 Washington residents were affected. 17 days elapsed between awareness and notification. 6 days to identify the breach. 0 days to contain the breach.

Group Health Incorporated reported to HHS on 2014-08-27 a Unauthorized Access/Disclosure affecting 802 individuals. Breached information located on Paper/Films.

Group Health Cooperative reported to HHS on 2013-10-03 a misdelivery affecting 1,015 individuals. Breached information located on Paper/Films. An erroneous mailing displayed protected health information (PHI) including names, medical record numbers, diagnoses, and addresses in the envelope's address window. The entity notified HHS, affected individuals, and the media, and implemented corrective procedures.

Group Health Incorporated (NY, Health Plan) reported to HHS on 2013-01-02 a Theft/accidental disclosure affecting 1,771 individuals. PHI — including social security numbers embedded in a series of numbers — was exposed on the outside of postcard reminders mailed to subscribers. OCR investigated; the CE suspended mailings, modified procedures to eliminate SSNs from outbound mail, retrained staff, and provided one year of free credit monitoring to affected individuals. Breached information located on Paper/Films.