Wyoming Department of Health (a Health Plan) reported to HHS OCR on 2013-12-19 a Hacking/IT Incident affecting 11,935 individuals. The CE transferred a WIC benefit program backup database via the internet to a business associate using an unsecured method, potentially disclosing demographic information, dates of birth, gender, and identification numbers stored on a Network Server. Following OCR's investigation, the CE completed an enterprise-wide risk analysis, developed a risk management plan, and restructured organizationally. OCR obtained assurances of corrective action.
Affected (this filing): 11,935