MARYLANDHHS OCRFirst filing
Filed Apr 26, 2018bd_47dd4c1058a72bed
CareFirst Blue Cross Blue Shield (MD) reported to HHS on 2018-04-26 a Hacking/IT Incident affecting 6,200 individuals. An employee was the victim of an email phishing attack that exposed ePHI including names, dates of birth, Social Security numbers, and health insurance information. Breached information was located in Email. The CE notified HHS and affected individuals, implemented additional technical safeguards, and retrained staff on recognizing fraudulent emails. OCR obtained assurances of corrective action.
Affected (this filing): 6,200
HHS notified