NEW YORKHHS OCRFirst filing
Filed Apr 14, 2010bd_147575422d125c63
Affinity Health Plan, Inc. (NY) reported to HHS OCR on 2010-04-14 a Theft/improper disposal breach affecting 344,579 individuals. Breached information was stored on photocopier hard drives that were returned to leasing agents without data erasure; CBS Evening News discovered the data on a purchased copier and alerted Affinity. OCR found Affinity failed to include photocopier ePHI in its risk analysis. A $1,215,780 settlement and corrective action plan were reached with HHS.
Affected (this filing): 344,579
HIPAA 60-day OK · 1dHHS notified · 1d