California Department of Health Care Services

California Department of Health Care Services (Health Plan, CA) reported to HHS on 2023-03-14 an Unauthorized Access/Disclosure affecting 6,460 individuals. The covered entity's business associate mailed PHI — including names, birthdates, Social Security numbers, addresses, and clinical information — to the wrong recipients. Breached information located on Paper/Films. The CE notified HHS, affected individuals, and the media. Additional administrative, technical, and security safeguards were implemented in response.

Affected (this filing): 6,460

The California Department of Health Care Services (DHCS) notified residents that a subcontractor, Advanced Image Direct, misdirected IRS Form 1095-B mailings containing personal information (name, address, DOB, last 4 of SSN, case number) to unintended recipients. The error was discovered on January 12, 2023, following a breach date of January 9, 2023. DHCS paused operations, investigated, attempted retrieval of mail, and is offering credit monitoring.