California Physicians Service d/b/a Blue Shield of California

The covered entity (CE), California Physicians Service d/b/a Blue Shield of California, which is a health plan provider, reported that an employee emailed a third-party insurance broker without authorization. The breach affected 1,717 individuals and the types of protected health information (PHI) included names, addresses, telephone numbers, subscriber identification numbers and Medicare Advantage plan names. The CE provided breach notification to individuals, HHS, and the media. OCR obtained assurances that the CE took voluntary corrective action by sanctioning workforce members and retraining workforce members associated with the violation.