Business Associate · Archived
CVS Caremark
4,305 individuals · submitted July 2, 2013
About this report
Business associate (BA) employees erroneously sent 4,305 health plan members' protected health information (PHI) to other plan members. The PHI involved in the breach included names and prescribed medication(s). The covered entity, Northrop Grumman Retiree Health Plan, provided breach notification to HHS, and the BA, CVS Caremark, provided breach notification to affected individuals and the media. Following the breach, the BA revised its quality control policies for targeted mailings and retrained employees involved in the breach to prevent similar incidents in the future. OCR obtained assurances that the BA implemented the breach notification and policy revisions listed above.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CVS Caremark
- State
- AZ
- Entity type
- Business Associate
- Individuals affected
- 4,305
- Submission date
- July 2, 2013
- Breach type
- Theft
- Location of information
- Paper/Films
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in AZ
AZ · Aug 25, 2026
Desert Pulmonary & Sleep Consultants, P.L.C.
3,000 individuals
AZ · Jul 11, 2026
Knospe-Lerncenter GmbH
800 individuals
AZ · Jun 26, 2026
Arrowhead Family Health Center PC
1,562 individuals
AZ · May 20, 2026
Southwest Behavioral Health Services.org
2,316 individuals
AZ · Mar 12, 2026
Team Select
949 individuals
AZ · Feb 13, 2026
Academic Urology & Urogynecology of Arizona
73,281 individuals
More Theft reports
WA · Mar 16, 2026
Renovo Chiropractic & Wellness
538 individuals
FL · Nov 5, 2025
Tampa Bay Treatment Associates
3,682 individuals
CA · Mar 6, 2025
SCLARC
722 individuals
PA · Mar 3, 2025
Sutera & Jones Surgical Podiatry A Division of Pace Foot and Ankle Center
602 individuals
NY · Feb 28, 2025
Stram Center for Integrative Medicine
15,263 individuals
HI · Feb 28, 2025
East Hawaii Rehab, Inc. DBA Lehua Physical Therapy and Rehab
8,472 individuals