Georgia Department of Community Health

Georgia Department of Community Health (a Health Plan) reported to HHS OCR on 2015-03-02 a Hacking/IT Incident affecting 355,127 individuals. AMGP Georgia Managed Care Company, a business associate, stored the CE's ePHI on servers of its parent, Anthem, Inc. Anthem suffered a series of cyberattacks exposing nearly 79 million people's ePHI. Exposed data included names, SSNs, medical ID numbers, addresses, dates of birth, email addresses, and employment information. OCR reviewed the BA agreement and separately reviewed Anthem, resulting in a monetary settlement and corrective action plan. Breached information located on Network Server.

Affected (this filing): 355,127