FEDERALHHS OCRFirst filing
Filed Mar 31, 2015bd_08b7e822416c0baf
Triple S Advantage, Inc, a subsidiary of Triple-S Management Corporation, reported a breach affecting 1,458 individuals. An investigation by the HHS Office for Civil Rights (OCR) found widespread non-compliance with HIPAA rules, including impermissible disclosure of PHI to a vendor without a business associate agreement, using more PHI than necessary for mailings, and failure to conduct a proper risk analysis. The company agreed to a $3.5 million settlement and a corrective action plan to address these deficiencies.
Affected (this filing): 1,458
HHS notified