HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 27, 2017.
- Organization as reported
- Shiel Sexton, IN
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- Jan. 27, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14286, row:5425)
- Archived copy
- Held in the private archive (provenance)
On January 10, 2017, Shiel Sexton learned that its former business associate (BA), HCH Administration, Inc., had disclosed protected health information (PHI) in 2012 to a reinsurer beyond the minimum necessary requirements in the business associate agreement (BAA) with Shiel Sexton. The breach affected 710 individuals and the types of PHI involved included names and social security numbers. The covered entity (CE) provided breach notification to affected individuals and the media on January 27, 2017, and also notified HHS. OCR obtained documented assurances that the CE implemented these corrective action steps. During the course of this investigation, OCR learned that the BA dissolved its business in 2013.