Concordia Plan Services on behalf of the Concordia Health Plan

Concordia Plan Services on behalf of the Concordia Health Plan (MO, Health Plan) reported to HHS OCR on 2015-04-16 a Hacking/IT Incident affecting 12,500 individuals. Blue Cross and Blue Shield of Minnesota, a business associate, stored the covered entity's ePHI on servers belonging to its parent, Anthem, Inc. Anthem experienced a series of cyberattacks exposing ePHI of ~79 million people. Affected data included names, SSNs, medical IDs, addresses, dates of birth, email addresses, and employment information. HHS OCR's separate review of Anthem resulted in a monetary settlement and corrective action plan. Breached information located on Network Server.