UnitedHealth Group (Health Plan, MN) reported to HHS OCR on 2010-06-04 a breach of type 'Other' affecting 16,291 individuals. Paper correspondence for members in UnitedHealth's prescription drug plans was inadvertently sent to incorrect temporary addresses due to a database administration error involving a third-party vendor (PDI) proprietary address database. Exposed data included member name, plan number, and in some cases date of birth and/or limited medical information. Breached information located on Paper/Films. UnitedHealth stopped using PDI's database and revised its address update process.
Affected (this filing): 16,291