RIHHS OCRFirst filing
Filed Sep 13, 2018bd_1b41ea6d66c97050
Blue Cross & Blue Shield of Rhode Island reported to HHS on 2018-09-13 an Unauthorized Access/Disclosure affecting 1,567 individuals. Breached information was located on Paper/Films. Business associate RedCard, a mailing services provider, improperly consolidated Explanation of Benefits (EOB) documents, causing EOBs for different individuals at the same address to be mailed together. Exposed PHI included names, plan ID numbers, provider names, types of medical service, and claim information. The BA ceased consolidating EOBs. OCR found the BA agreement compliant with the Privacy Rule.
Affected (this filing): 1,567
HHS notified