Contra Costa Health Plan

Contra Costa Health Plan reported to HHS on 2018-12-13 an incident of unauthorized access affecting 862 individuals. The breach occurred when a business associate, who had provided services under a false identity, accessed health plan enrollees’ protected health information (PHI), including demographic and clinical data. The breached information was located on the entity's Electronic Medical Record and Email systems. The incident was discovered on May 22, 2018.

Affected (this filing): 862

Contra Costa Health Plan notified California AG of a breach involving a contractor who falsified her identity to obtain a utilization management contract starting Dec 1, 2014. The contractor accessed member electronic health records containing PII, SSNs, and medical info. CCHP terminated the contract and conducted a forensic audit finding no evidence of misuse. Affected individuals were offered one year of credit monitoring.