Business Associate · Archived
CareFirst BlueCross BlueShield Community Health Plan – District of Columbia
2,189 individuals · submitted February 16, 2024
About this report
CareFirst BlueCross BlueShield Community Health Plan – District of Columbia, the covered entity (CE) reported that an employee inadvertently made the protected health information (PHI) of 2,189 individuals, viewable via the Internet. The PHI involved included names, addresses, dates of birth, claims information, diagnoses, conditions, and other treatment details. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented enhanced encryption technologies, strengthened password requirements and introduced additional technical safeguards.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CareFirst BlueCross BlueShield Community Health Plan – District of Columbia
- State
- DC
- Entity type
- Business Associate
- Individuals affected
- 2,189
- Submission date
- February 16, 2024
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Network Server
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in DC
DC · Jul 23, 2026
Casper Orthopedic Associates, PC
56,197 individuals
DC · May 18, 2026
Community Connections
18,943 individuals
DC · May 7, 2026
World Trade Center Health Program
1,071 individuals
DC · Apr 16, 2026
Washington VA Medical Center
1,467 individuals
DC · Jan 13, 2025
Veterans Health Administration
1,847 individuals
DC · Dec 11, 2024
Community Connections
18,949 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals