Sunshine State Health Plan, Inc. (FL) reported to HHS on 2016-07-14 an Unauthorized Access/Disclosure affecting 1,479 individuals. A case manager emailed a daily inpatient census report to an incorrect email address, exposing PHI including member names, addresses, dates of birth, plan and eligibility information, hospitalization dates, Medicaid and Medicare ID numbers, diagnoses, and procedures. The CE sanctioned the employee, revised its email encryption policies, and OCR obtained assurances of corrective action.
Affected (this filing): 1,479