HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 11, 2026.
- Organization as reported
- BlueCross BlueShield of Tennessee, Inc., TN
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Feb. 11, 2026
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 8994, row:133)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), BlueCross BlueShield of Tennessee, Inc., reported that a subcontractor of its covered entity (CE) experienced a breach that affected approximately 37,402 individuals. The protected health information (PHI) involved names and other identifiers. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA provided the affected individuals with free credit monitoring. OCR provided technical assistance to the BA regarding the HIPAA Rules.