On January 23, 2017, Rocky Mountain Health Maintenance Organization, Inc. mailed letters containing protected health information (PHI) to incorrect recipients, affecting approximately 1,320 individuals. The PHI included demographic information and the last four digits of social security numbers or dates of birth. The organization notified HHS, affected individuals, and the media, and subsequently revised its HIPAA policies and procedures.
Affected (this filing): 1,320