Health Data Breach Tracker/IL

Business Associate · Archived

Blue Cross Blue Shield of Illinois

3,831 individuals · submitted August 20, 2026

About this report

The business associate (BA), Blue Cross Blue Shield of Illinois, reported that an employee mailed the protected health information (PHI) of 3,831 individuals to the wrong recipients. The PHI involved names and medications. The BA notified HHS, the media, and the affected individuals. In its mitigation efforts, the BA retrained its workforce and enhanced its quality control processes to prevent a reoccurrence. OCR provided technical assistance to the BA regarding the HIPAA Rules.

Summary as published by the HHS Office for Civil Rights.

Organization
Blue Cross Blue Shield of Illinois
State
IL
Entity type
Business Associate
Individuals affected
3,831
Submission date
August 20, 2026
Breach type
Unauthorized Access/Disclosure
Location of information
Paper/Films
Business associate present
Yes
OCR status
Archived

More breach reports in IL

More Unauthorized Access/Disclosure reports