CVS Caremark Part D Services, L.L.C. ("CVS")

CVS Caremark Part D Services, L.L.C. reported to HHS on 2024-02-23 an Unauthorized Access/Disclosure affecting 11,193 individuals. A workforce member inadvertently mailed PHI—including names, dates of birth, and health insurance information—to wrong recipients. Breached information was located on Paper/Films. The BA notified HHS, affected individuals, and the media, and responded by retraining the workforce member and improving administrative safeguards.

Affected (this filing): 11,193

CVS Caremark Part D Services, L.L.C., a health sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2023-12-27 and filed notice on 2024-02-23. 2,193 Washington residents were affected. 58 days elapsed between awareness and notification. 37 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 2,193