EmblemHealth Plan, Inc.

EMBLEM HEALTH filed a data-breach notice with the Illinois Attorney General in January 2024 (case 24-01-001). The register records the breach as discovered on September 9, 2023. Additional entities named: PNC-ECHO HEALTH. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

EmblemHealth Plan, Inc. (NY) reported to HHS on 2022-05-16 an Unauthorized Access/Disclosure affecting 11,399 individuals. An employee inadvertently mailed PHI — including names, member identification numbers, and claims and treatment information — to wrong recipients. Breached information located on Paper/Films. The CE notified HHS, affected individuals, and media, and subsequently strengthened administrative and technical safeguards.

Emblem Health - GHI reported to HHS on 2017-02-17 a Unauthorized Access/Disclosure affecting 703 individuals. Breached information located on Paper/Films. A business associate impermissibly disclosed PHI (names, addresses, DOB, SSN) by mailing 1095-B tax forms to wrong members. CE provided notification, credit monitoring, and re-mailed forms.

Emblem Health - GHI reported to HHS on 2016-11-22 a Unauthorized Access/Disclosure affecting 81122 individuals. Breached information located on Network Server, Other, Paper/Films. A business associate mailed letters containing PHI (names, addresses, SSNs) to members.

Emblem Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-05-31. 20 Massachusetts residents were affected. The report records the breach type as electronic.