Morgan Stanley (Health Plan, NY) reported to HHS on 2023-04-18 an Unauthorized Access/Disclosure breach affecting 535 individuals. A vendor employee inadvertently mailed PHI — including names, dates of birth, addresses, Social Security numbers, diagnoses, lab results, medications, and other treatment information — to wrong addresses. Breached information located on Paper/Films. The CE notified HHS and affected individuals and implemented additional administrative, technical, and security safeguards.
Affected (this filing): 535