MetroPlus Health Plan, Inc.

An employee of MetroPlus Health Plan, Inc. emailed unencrypted files containing the electronic protected health information (ePHI) of 31,980 members to personal and work email addresses. The exposed information included members’ names, addresses, dates of birth, and Social Security numbers. The health plan notified HHS and affected individuals, offered one year of credit monitoring, sanctioned the employee, and ensured the ePHI was deleted from the personal email account.

Affected (this filing): 31,980