PRHHS OCRFirst filing
Filed May 29, 2014bd_c437bf43c5efb745
Triple-S Salud (a subsidiary of Triple-S Management Corporation, a Puerto Rico-based health insurer) reported to HHS OCR on 2014-05-29 an Unauthorized Access/Disclosure breach affecting 56,853 individuals, with breached information located on Paper/Films. OCR investigations revealed widespread HIPAA non-compliance: impermissible PHI disclosures to a vendor lacking a business associate agreement, disclosure of more PHI than necessary for mailings, and inadequate safeguards. Triple-S settled for $3.5 million and adopted a Corrective Action Plan.
Affected (this filing): 56,853
HHS notified