Oklahoma Healthcare Authority (OHCA)

Oklahoma Health Care Authority (OHCA), a Health Plan in Oklahoma, reported to HHS on 2022-02-03 an Unauthorized Access/Disclosure affecting 8,629 individuals. The covered entity's business associate discovered a configuration issue within a patient portal that compromised PHI. Information exposed included names, dates of birth, addresses, Social Security numbers, and account information, located on a Network Server. OHCA notified HHS, affected individuals, and the media, and implemented additional technical safeguards. OCR provided technical assistance on business associate agreement requirements.

Affected (this filing): 8,629