Triple-S Salud, Inc. data breach (2013)

Breach window

Sep 20, 2013

When the intrusion reportedly occurred, per the linked filings

Breach discovered

Sep 23, 2013

Reported by HHS OCR filing

46 days

FEDERALHHS OCRFirst filing

Filed Nov 8, 2013bd_5f8929715e5af19f

Triple-S Salud, Inc. (business associate of Puerto Rico Health Insurance Administration / Administración de Seguros Salud de Puerto Rico) was reported to HHS on 2013-11-08 for an Unauthorized Access/Disclosure affecting 13,336 individuals. On September 20, 2013, a vendor of Triple-S Salud mailed pamphlets that displayed PHI (names, mailing addresses, health insurance claim numbers) on the outside. Discovery occurred September 23, 2013. Breached information located on Paper/Films. OCR investigation resulted in CE commitments to risk analysis, risk management planning, policy revision, and staff retraining.

Affected (this filing): 13,336

HHS notified

Triple-S Salud, Inc.

Litigation Timing

Timeline