Sharp Health Plan

Sharp Health Plan confirmed a system error in its vendor's printing software on December 26, 2023, which failed to apply member names to address lines in a bulk mailing. This misdelivery exposed PHI including member name, address, behavioral health provider name, and visit history for 2023. The vendor modified software and QA processes to prevent recurrence. Notices were sent to affected individuals.

Sharp Health Plan notified California residents that their PHI was accessed via a vulnerability in MOVEit Transfer software used by business associate Delta Dental. The unauthorized access occurred between May 27 and May 30, 2023. Affected data included names, SSNs, and dental treatment info. Delta Dental engaged forensics and notified law enforcement.

Sharp Health Plan reported to HHS on 2024-01-08 a Unauthorized Access/Disclosure affecting 8200 individuals. Breached information located on Paper/Films. An employee of its business associate inadvertently mailed PHI (names, addresses, treatment info) to wrong recipients. CE and BA strengthened administrative and technical safeguards.

Affected (this filing): 8,200