L.A. Care Health Plan, the nation's largest publicly operated health plan, reported to HHS OCR on 2019-03-15 an Unauthorized Access/Disclosure breach affecting 1,506 individuals, with breached information located on Paper/Films. OCR's investigation found systemic HIPAA Security Rule noncompliance, including failures in risk analysis, risk management, activity review, and ePHI security evaluations. LA Care agreed to a $1,300,000 settlement and a three-year corrective action plan monitored by OCR.
Affected (this filing): 1,506