Colorado Department of Health Care Policy and Financing

Between May 25, 2015 and July 5, 2015, the Governors' Office of Technology (a business associate) sent PHI-containing letters to the wrong Medical Assistance Program clients due to a technical error in their computer system. Affected data included names, addresses, state ID numbers, Medicaid case numbers, employer names, income amounts, Advanced Premium Tax Credit amounts, program approvals/denials, and dates of birth. Up to 3,537 individuals were impacted; 1,622 reported to HHS. Deloitte (subcontractor) fixed the Colorado Benefits Management System software and added mailing QC controls. OCR obtained written corrective-action assurances. Location of breached info: Paper/Films.

Affected (this filing): 1,622