HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 22, 2023.
- Organization as reported
- Clover Health LLC, NJ
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Network Server
- Submission date
- Sept. 22, 2023
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10453, row:1592)
- Archived copy
- Held in the private archive (provenance)
Clover Health, the covered entity (CE), reported that an employee of its business associate (BA) posted the protected health information (PHI) of 2,834 individuals to the Internet. The PHI involved included names, birthdates, addresses, phone numbers, and other treatment information. Clover Health notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA sanctioned the responsible employee and strengthened its administrative and technical safeguards.