UCare
ent_fd0d8e71aa43b7bd1c01081e
Disclosures
3
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
4,806
nationwide · HHS OCR MN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- UCare
- Normalized
- ucare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 21380059E7Z6EJ6HSZ53
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- ucare.org
Disclosure history (3)newest first
- Montana State AGas victim2020-09-22
UCare Minnesota notified Montana residents of a cybersecurity incident where email accounts were accessed by an unknown party on May 4, 2020. The breach may have exposed names, DOBs, healthcare provider info, diagnosis data, member IDs, and claim costs. UCare enhanced email security and educated employees.
- MINNESOTAHHS OCRas victim2020-09-18
UCare Minnesota, a Minnesota-based health plan, reported to HHS on 2020-09-18 that numerous employees fell victim to an email phishing scheme affecting the ePHI of 4,806 individuals. Breached information (located in Email) included names, addresses, birthdates, claims and financial information, medications prescribed, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and media, and implemented additional safeguards and a fraud claims review process. OCR provided technical assistance on Security Rule and Breach Notification Rule compliance.
- Illinois State AGas victim2020-01-01
UCARE MINNESOTA filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-371). The register records the breach as discovered on May 15, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.