HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 19, 2019.
- Organization as reported
- Security Health Plan of Wisconsin, Inc., WI
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- July 19, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13311, row:4450)
- Archived copy
- Held in the private archive (provenance)
Northwood, Inc., a business associate (BA) of Blue Care Network and Blue Cross Blue Shield of Michigan, reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 18,684 individuals. Of note, Northwood is a BA of Security Health Plan of Wisconsin whose PHI was also compromised as a result of this breach. The PHI involved included names, addresses, dates of birth, health insurance information, and treatment information. Northwood notified HHS, affected individuals, the media, and the FBI. In its mitigation efforts, Northwood implemented additional administrative technical, and security safeguards to better protect its PHI. OCR obtained assurances that Northwood implemented the corrective action noted.