MNHHS OCRFirst filing
Filed Feb 21, 2014bd_1ab39edd45af25a2
StayWell Health Management, LLC, a business associate of Missouri Consolidated Health Care Plan, reported to HHS on 2014-02-21 an Unauthorized Access/Disclosure affecting 10,024 individuals. On that date, the BA erroneously made a spreadsheet accessible via an internet link. The spreadsheet contained participants' names, email addresses, internal IDs, wellness program status, email notification info, and survey completion data. Breached information was located on a Network Server. The BA removed the spreadsheet, implemented a legacy system for ePHI in transit, and the CE updated its Privacy and Security Policy with encryption standards. OCR obtained documented assurances of corrective actions.
Affected (this filing): 10,024
HHS notified