Health Plan · Archived
Centers for Medicare & Medicaid Services
10,011 individuals · submitted April 7, 2023
About this report
The covered entity (CE), Centers for Medicare & Medicaid Services, reported that an employee of its business associate (BA) inadvertently mailed the protected health information (PHI) of 10,011 individuals to the wrong recipients. The PHI involved included names, addresses, claims information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative and technical safeguards to better protect PHI.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Centers for Medicare & Medicaid Services
- State
- MD
- Entity type
- Health Plan
- Individuals affected
- 10,011
- Submission date
- April 7, 2023
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Paper/Films
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals