PRHHS OCRFirst filing
Filed Sep 29, 2011bd_1f0195c39e49788c
MAPFRE Life Insurance Company of Puerto Rico reported to HHS OCR on 2011-09-29 a Theft affecting 2,209 individuals. A USB 'pen drive' containing ePHI (names, dates of birth, SSNs) was stolen from the IT department overnight without safeguards. Breached information located on Desktop Computer and Other portable media. OCR found failures in risk analysis, risk management, and encryption of removable media. MAPFRE settled for $2.2 million with a corrective action plan.
Affected (this filing): 2,209
HHS notified