Indiana State Medical Association
ent_cbb37f8a737d3932e7562e03
Disclosures
2
HHS OCR · State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
39,090
nationwide · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Indiana State Medical Association
- Normalized
- indiana state medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- INDIANAHHS OCRas victim2015-03-06
Indiana State Medical Association (a Health Plan in IN) reported to HHS OCR on 2015-03-06 a Theft affecting 38,351 individuals. Two hard drives containing ePHI were stolen from an employee's vehicle. Data involved included names, addresses, dates of birth, Social Security numbers, health insurance information, and clinical information. The CE sanctioned the employee, implemented new safeguards, retrained staff, and offered free credit monitoring. OCR obtained assurances of corrective action.
- New Hampshire State AGas victim2015-03-06
Indiana State Medical Association (ISMA) reported the theft of two unencrypted archive hard drives containing personal information of 39,090 individuals. The theft occurred on February 13, 2015, while an employee was transporting the drives to an off-site storage location. Affected data included names, addresses, dates of birth, email addresses, health plan numbers, and for some individuals, social security numbers and medical history. ISMA discovered the theft the same day and reported it to police. Encryption had been disabled by an IT vendor without ISMA's knowledge. ISMA restored encryption, revised policies, and offered one year of credit monitoring.