An equipment operator at the State of Tennessee Sponsored Group Health Plan's postal facility incorrectly configured a machine, causing the protected health information of 1770 enrollees to be mailed to incorrect addresses. The breach, reported to HHS on 2011-11-28, exposed names, addresses, birth dates, and social security numbers. The entity retrained the employee, offered identity theft protection, and modified its mailing policies.
Affected (this filing): 1,770