FEDERALHHS OCRFirst filing
Filed Apr 2, 2014bd_c216f2f6b784aa18
Triple-S Salud (a subsidiary of Triple-S Management Corporation, a Puerto Rico health insurer) reported to HHS OCR on 2014-04-02 a Theft breach affecting 5,795 individuals. Breached PHI was located on 'Other' media. OCR investigations found widespread HIPAA non-compliance including failure to safeguard PHI, impermissible disclosures to a vendor lacking a BAA, and excess PHI use in mailings. Triple-S settled for $3.5 million and adopted a corrective action plan.
Affected (this filing): 5,795
HHS notified