KEYSTONE INSURERS GROUP reported to HHS on 2014-05-06 a breach involving the improper disclosure of Protected Health Information (PHI) via email. The incident, classified as 'Other' (Improper Disposal/Disclosure), affected 1008 individuals. The breach occurred between January 23, 2013, and March 3, 2013, when the Business Associate disclosed more than the minimum necessary information to healthcare providers. Affected data included demographic information (names, addresses, birthdates, insurance numbers) and clinical information (diagnoses, treatments, prescriptions, expenses). The Covered Entity, City of Henderson, terminated the agreement with the BA, obtained certificates of deletion, and implemented new privacy policies and training.
Affected (this filing): 1,008