7-Eleven, Inc. Comprehensive Welfare Benefits Plan No. 525

7-Eleven, Inc. Comprehensive Welfare Benefits Plan No. 525 (Health Plan, TX) reported to HHS OCR on 2015-03-25 a Hacking/IT Incident affecting 1,688 individuals. Blue Cross and Blue Shield of Texas, a business associate, stored the covered entity's ePHI on servers belonging to its parent, Anthem, Inc. Anthem experienced a series of cyberattacks exposing ePHI of ~79 million people. Breached data included names, SSNs, medical IDs, addresses, dates of birth, email addresses, and employment information. OCR reviewed the BA agreement and separately investigated Anthem, resulting in a monetary settlement and corrective action plan.