TEXASHHS OCRFirst filing
Filed Oct 15, 2018bd_cfe01b342d63b6c8
Employees Retirement System of Texas (a Texas Health Plan) reported to HHS on 2018-10-15 an Unauthorized Access/Disclosure affecting 1,248,263 individuals. A member manipulated an editable search field in the CE's online member portal, allowing them to view other members' PHI — including names and Social Security numbers. Breached information located on Other (online member portal). The CE improved safeguards, conducted workforce training, and provided notification to HHS, affected individuals, and the media. OCR obtained assurances of corrective action implementation.
Affected (this filing): 1,248,263
HHS notified