HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 27, 2010.
- Organization as reported
- UnitedHealth Group health plan single affiliated covered entity, MN
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Other, Paper/Films
- Submission date
- April 27, 2010
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 16062, row:7201)
- Archived copy
- Held in the private archive (provenance)
On March 2, 2010, the covered entity (CE), UnitedHealth Group, discovered that remittance forms containing member information which accompany paper checks were stolen. The invoices contained the protected health information (PHI) of over 735 individuals. The types of PHI included demographic and claims information. The CE provided breach notification to HHS, affected individuals, and the media, and provided affected individuals with credit monitoring services. Following the breach, the CE reviewed its payment and remittance information controls and notified its provider call centers to remain on a high level alert to monitor all remittance payments. OCR obtained assurances that the CE implemented the corrective actions listed above.