MOHHS OCRFirst filing
Filed Apr 8, 2011bd_f4124a562d101179
Union Security Insurance Company (MO), a Health Plan, reported to HHS on 2011-04-08 an Unauthorized Access/Disclosure affecting 935 individuals. Two incidents occurred: (1) On 2011-02-18, a policyholder discovered they could access other policyholders' online accounts (~1,500 affected) exposing names, DOBs, SSNs, and other identifiers due to a website coding flaw. (2) On 2013-05-17, an employee impermissibly emailed a spreadsheet with names and SSNs of ~1,127 group members. Breached information located in: Other. Remediation included disabling/recoding the website, increased vulnerability scans, employee retraining, and a ban on SSNs in customer documents.
Affected (this filing): 935
HHS notified