FEDERALHHS OCRFirst filing
Filed Jul 21, 2011bd_eaf33677204a6fe9
On May 9, 2011, a computer server at Assurecare Risk Management, Inc. (a former business associate of Gypsum Management & Supply, Inc. Medical and Dental Plan) was hacked, exposing demographic, clinical, and health insurance information for 25,330 of the covered entity's current and former employees. The CE notified HHS, affected individuals, and the media. OCR confirmed a proper BA agreement was in place. Internal investigation showed little activity on the server post-hack and no reports of misuse have been received.
Affected (this filing): 25,330
HIPAA 60-day late · 73dHHS notified · 73d