HHS OCR breach report for Molina Healthcare of Virginia (Business Associate) regarding an unauthorized disclosure of PHI involving 1,499 individuals. A subcontractor (HBS) uploaded a pharmacy claims report containing PHI to a non-secured FTP site during troubleshooting. The file was encrypted and password-protected. Remediation included employee retraining, software updates, and offering identity theft protection.
Affected (this filing): 1,499