Mapfre
ent_a3173650c554ffa2e1185b3c
Disclosures
2
HHS OCR enforcement · HHS OCR · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
2,209
nationwide · HHS OCR PR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Mapfre
- Normalized
- mapfre— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- mapfre.com
Disclosure history (2)newest first
- FEDERALHHS OCR enforcementas victim2017-01-18
HHS OCR settled with MAPFRE Life Insurance Company of Puerto Rico for $2.2 million regarding the impermissible disclosure of unsecured ePHI. A stolen USB device containing names, DOBs, and SSNs of 2,209 individuals was left in an IT department without safeguards. Violations included failure to conduct risk analysis, implement risk management, and deploy encryption on laptops/removable media.
- PUERTO RICOHHS OCRas victim2011-09-29
MAPFRE Life Insurance Company of Puerto Rico reported to HHS OCR on 2011-09-29 a Theft affecting 2,209 individuals. A USB 'pen drive' containing ePHI (names, dates of birth, SSNs) was stolen from the IT department overnight without safeguards. Breached information located on Desktop Computer and Other portable media. OCR found failures in risk analysis, risk management, and encryption of removable media. MAPFRE settled for $2.2 million with a corrective action plan.