Blue Cross and Blue Shield of Massachusetts, Inc.

On February 20, 2017, Blue Cross Blue Shield of Massachusetts (BCBSMA) erroneously emailed a data file containing the protected health information (PHI) of 1,843 individuals to one of its employer accounts. The file included names, addresses, birthdates, and social security numbers. The error was discovered on December 12, 2017, when the employer account used the incorrect data to send letters. Upon notification, the recipient destroyed the data. BCBSMA reported the breach to HHS on December 26, 2017.

Affected (this filing): 1,843