Health Plan · Archived
UPMC Health Plan
722 individuals · submitted July 2, 2015
About this report
An employee of the covered entity (CE), UPMC Health Plan, inadvertently sent an unsecure email with protected health information (PHI) to an incorrect, third-party email address. The breach included the electronic PHI of 722 individuals and included names, dates of birth, member identification numbers, phone numbers, types of insurance, and members' primary care providers. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE retrained staff members. OCR reviewed UPMC Health Plan’s risk analysis to ensure compliance with the Security Rule and obtained assurances that the CE implemented the corrective actions listed above.
Summary as published by the HHS Office for Civil Rights.
- Organization
- UPMC Health Plan
- State
- PA
- Entity type
- Health Plan
- Individuals affected
- 722
- Submission date
- July 2, 2015
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Business associate present
- No
- OCR status
- Archived
More breach reports in PA
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals
PA · Oct 5, 2026
Franklin/Fulton Mental Health/Intellectual & Developmental Disabilities/Early Intervention
640 individuals
PA · Sep 9, 2026
Novocure Inc.
1,464 individuals
PA · Sep 4, 2026
Beaver County Behavioral Health
501 individuals
PA · Sep 4, 2026
COMHAR, Inc.
501 individuals
PA · Aug 31, 2026
The Foot and Ankle Wellness Center of Western Pennsylvania
653 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals