Kaiser Foundation Healthplan, Inc. of Southern California

Kaiser Foundation Health Plan, Inc. of Southern California (Kaiser Permanente) reported to HHS OCR on 2016-11-06 an Unauthorized Access/Disclosure affecting 3,044 individuals. An error in the KP website's configuration settings allowed some users to view the PHI of other members. Breached information resided on a Network Server and included names, addresses, dates of birth, claims information, clinical information, financial information, medications prescribed, and other treatment information. KP remediated by creating a corrective action plan, retraining staff, and implementing additional safeguards. OCR provided Security Rule guidance.

Affected (this filing): 3,044