Group Health Incorporated (NY, Health Plan) reported to HHS on 2013-01-02 a Theft/accidental disclosure affecting 1,771 individuals. PHI — including social security numbers embedded in a series of numbers — was exposed on the outside of postcard reminders mailed to subscribers. OCR investigated; the CE suspended mailings, modified procedures to eliminate SSNs from outbound mail, retrained staff, and provided one year of free credit monitoring to affected individuals. Breached information located on Paper/Films.
Affected (this filing): 1,771