ConnectiCare (CT, Health Plan) reported to HHS OCR on 2018-02-21 an Unauthorized Access/Disclosure affecting 1,834 individuals. On January 4, 2018, CE learned that its business associate RR Donnelly sent subscribers the wrong identification cards due to a programming logic error, exposing demographic and health plan information. OCR found CE policies and BA agreement compliant with the Privacy Rule. RR Donnelly implemented corrective coding logic on January 24, 2018. Individuals and media were notified per Breach Notification Rule. Breached information located on Paper/Films.
Affected (this filing): 1,834