TEXASHHS OCRFirst filing
Filed Apr 27, 2015bd_ff84c4d2f3c60527
CEMEX, Inc. (TX, self-insured health plan) reported to HHS OCR on 2015-04-27 that 880 individuals' ePHI was exposed via its business associate Blue Cross and Blue Shield of Texas, which stored CEMEX ePHI on servers of BCBSTX's parent Anthem, Inc. Anthem suffered a series of cyberattacks that exposed ePHI of nearly 79 million people. Data exposed included names, SSNs, medical IDs, addresses, dates of birth, email addresses, and employment information. OCR found the BA agreement compliant; a separate OCR review of Anthem led to a monetary settlement and corrective action plan.
Affected (this filing): 880
HHS notified