DCHHS OCRFirst filing
Filed Jan 8, 2010bd_91b1d21bf921082b
Service Benefits Plan Administrative Services Corp (a Business Associate in DC) reported to HHS OCR on 2010-01-08 a breach affecting ~3,400 individuals. The BA incorrectly updated contract holders' addresses and mailed PHI — including demographic information, explanations of benefits, clinical information, and diagnoses — to wrong addresses. The breach involved a system error caught in code review. Breached information was on Paper/Films. OCR investigated and verified a proper BA agreement was in place; the BA improved its processes and contracted a new mail address verification vendor.
Affected (this filing): 3,400
HHS notified