California Department of Health Care Services

The California Department of Health Care Services (DHCS) notified residents that a subcontractor, Advanced Image Direct, misdirected IRS Form 1095-B mailings containing personal information (name, address, DOB, last 4 of SSN, case number) to unintended recipients. The error was discovered on January 12, 2023, following a breach date of January 9, 2023. DHCS paused operations, investigated, attempted retrieval of mail, and is offering credit monitoring.

California Department of Health Care Services (Health Plan, CA) reported to HHS on 2023-03-14 an Unauthorized Access/Disclosure affecting 6,460 individuals. The covered entity's business associate mailed PHI — including names, birthdates, Social Security numbers, addresses, and clinical information — to the wrong recipients. Breached information located on Paper/Films. The CE notified HHS, affected individuals, and the media. Additional administrative, technical, and security safeguards were implemented in response.

California Department of Health Care Services (DHCS) disclosed a misdelivery incident involving Beneficiary Identification Cards (BIC) for Medi-Cal children. Between December 10 and 18, 2012, cards were mailed to the wrong households due to a programming error. Affected data included names, Client Index Numbers, dates of birth, and gender; Social Security Numbers were not included. DHCS discovered the error on December 19, 2012, and sent notification letters and replacement cards to affected families.

California Department of Health Care Services (DHCS) reported to HHS on 2012-12-23 an Unauthorized Access/Disclosure affecting 2,643 individuals. Due to a computer programming error in electronic mailing files, 2,705 Medi-Cal member ID cards were mailed to wrong households. PHI on the cards included names, dates of birth, genders, dates of issue, and Medi-Cal-assigned numbers. The CE halted mailings, deactivated and replaced the cards, and implemented new data transfer policies and mailing procedures. OCR obtained assurances of corrective action.

California Department of Healthcare Services reported a data breach to the California Attorney General on November 5, 2012. The filing provides only the occurrence date and organization name; the attached notice PDF is unreadable/redacted, preventing extraction of data types, affected counts, or incident details.