HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 21, 2010.
- Organization as reported
- Blue Cross & Blue Shield of Rhode Island, RI
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- April 21, 2010
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 16068, row:7207)
- Archived copy
- Held in the private archive (provenance)
A covered entity (CE) donated a file cabinet containing the protected health information (PHI) of 12,000 individuals before cleaning it out. The PHI included members' names, addresses, telephone numbers, social security numbers, and Medicare identification numbers. The covered entity (CE) provided breach notification to HHS, the affected individuals, and media, and offered all affected individuals free credit monitoring for a period of one year. Following the breach, the CE sanctioned the employees involved in the incident and held a mandatory training regarding the HIPAA Privacy and Security Rule for all departments involved in the breach. The CE also revised the policy for office moves. OCR obtained assurances that the CE implemented the corrective action listed above. \ \