Hogan Services Inc. Health Care Premium Plan

On March 30, 2012, Hogan Services Inc. (HSI), sponsor of a fully insured employee health plan (MO), erroneously emailed ePHI of approximately 1,134 individuals to 287 employees. Exposed data included names, SSNs, dates of birth, gender, plan IDs, member IDs, enrollment dates, coverage types, and dependent relationship info. HSI shut down its email server, deleted ePHI from workstations, shredded printed copies, and notified HHS and affected individuals. Following OCR investigation, HSI ceased ePHI handling, retrained staff, and deployed encryption. Breached information located on Email.