HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 5, 2018.
- Organization as reported
- CarePlus Health Plan [case #HU1800066], KY
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Feb. 5, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13922, row:5061)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), CarePlus Health Plan, reported that protected health information (PHI) was sent to the wrong patients in explanation of benefits (EOB) letters, affecting 11,248 individuals. The types of PHI included demographic, health plan and clinical information. The CE provided breach notification to HHS, affected individuals and the media. Following the breach, the CE sanctioned the employees responsible for the erroneous mailing, and substantially revised its EOB printing process and review procedures. Following the investigation, the CE was planning to transition to a more accurate printing technology to prevent future impermissible disclosures.