norm: centene managementno LEI · no CIKMax severity: High↳ subsidiary of Centene Corporation

Canonical registry

Centene Management Corporation

ent_fc6bcffcb76898edd1b60e19

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

8,208

as filed · HHS OCR MO

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Centene Management Corporation
Normalized: centene management— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record
Corporate parent: Centene Corporation— per SEC Exhibit 21 filing

Disclosure history (1)newest first

MOHHS OCRas victim2015-10-15
An employee of business associate Centene Management Company downloaded data files containing PHI of 8,208 individuals to an unauthorized removable storage device before resigning. The employee returned a company-issued laptop on 2015-03-23, but it was not connected to the network for processing per standard procedure, delaying detection. On 2015-10-08, a data loss prevention tool discovered the impermissible downloads when the laptop was finally connected. PHI included names, addresses, dates of birth, medical ID numbers, and in some cases SSNs. Affected members were enrollees of covered entities Bridgeway Health Solutions and Superior Health Plan. The BA notified HHS, affected individuals, and media, and provided substitute notice. Remediation included new IT-equipment processing policy and DLP controls preventing downloads to unauthorized external storage. OCR provided technical assistance on Security Rule risk analysis/management.