Western Health Advantage

Western Health Advantage (WHA) notified members and providers of a security incident on October 25, 2019, caused by a computer system error at a contracted vendor. The error resulted in WHA files being downloaded to another company's server. Affected data included names, addresses, dates of birth, member IDs, service dates, diagnosis codes, procedure codes, provider names, NPI numbers, and Social Security Numbers. No evidence of misuse was found. WHA offered one year of free credit monitoring.

Western Health Advantage reported to HHS on 2019-12-13 a Unauthorized Access/Disclosure affecting 869 individuals. Breached information located on Network Server. A business associate, Cognizant TriZetto Software Group, Inc., experienced a communication error during routine maintenance, allowing another covered entity to inadvertently download ePHI (names, birthdates, diagnoses, treatment info). The BA implemented additional technical safeguards.

Affected (this filing): 869