Puerto Rico Department of Health - Triple S Management Corp.

Puerto Rico DOH reported on behalf of the Puerto Rico Health Insurance Administration (Triple-S Salud / Triple-C) that two former BA employees improperly accessed TSS' IPA database using credentials that were not terminated upon departure. Approximately 400,000 members' names, contract numbers, home addresses, diagnostic codes, and treatment codes were accessed. Network Server was the location of breached information. OCR investigation led to commitments for risk analysis, policy revisions, and staff retraining.

Affected (this filing): 475,000