CareFirst BlueCross BlueShield Community Health Plan – District of Columbia

CareFirst BlueCross BlueShield Community Health Plan – District of Columbia, the covered entity (CE) reported that an employee inadvertently made the protected health information (PHI) of 2,189 individuals, viewable via the Internet. The PHI involved included names, addresses, dates of birth, claims information, diagnoses, conditions, and other treatment details. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented enhanced encryption technologies, strengthened password requirements and introduced additional technical safeguards.