CarePlus Health Plan [case #HU1800066]

The covered entity (CE), CarePlus Health Plan, reported that protected health information (PHI) was sent to the wrong patients in explanation of benefits (EOB) letters, affecting 11,248 individuals. The types of PHI included demographic, health plan and clinical information. The CE provided breach notification to HHS, affected individuals and the media. Following the breach, the CE sanctioned the employees responsible for the erroneous mailing, and substantially revised its EOB printing process and review procedures. Following the investigation, the CE was planning to transition to a more accurate printing technology to prevent future impermissible disclosures.