[{"innerBlocks":[],"name":"core\/freeform","postId":1724,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Independence Blue Cross is alerting nearly 17,000 members after an employee put protected health information on to a public-facing website.

The information was uploaded as a file accessible on the website for the Blues plan, which serves the greater Philadelphia region, from this past April 23 to July 20, the insurer reports.

\u201cAfter a thorough investigation, we are unable to determine if protected health information was accessed and are unaware of any actual or attempted misuse of this information,\u201d the Blues plan explained in a notice.

However, the most sensitive patient data\u2014including Social Security numbers, financial information and credit card information\u2014were not affected by the breach.

Potentially compromised data included member names, dates of birth, diagnosis codes, provider information and information used for claims processing, such as claim numbers, referral numbers and service dates.

Also See<\/b>: Hacker accesses email accounts, PHI at retirement communities<\/a>

Upon learning of the breach, the insurer permanently removed the file from the website, reviewed company policies and procedures, and added additional technical controls to prevent reoccurance of such an incident. \u201cWe also ensured that the appropriate action was taken with the employee responsible for uploading the subject file,\u201d the insurer noted.

In addition to providing two years of identity protection services, Independence Blue Cross also provided affected individuals information on protecting themselves against identity theft or financial loss, and encouraged placing fraud alerts with the major credit bureaus.","saveContent":"Independence Blue Cross is alerting nearly 17,000 members after an employee put protected health information on to a public-facing website.

The information was uploaded as a file accessible on the website for the Blues plan, which serves the greater Philadelphia region, from this past April 23 to July 20, the insurer reports.

\u201cAfter a thorough investigation, we are unable to determine if protected health information was accessed and are unaware of any actual or attempted misuse of this information,\u201d the Blues plan explained in a notice.

However, the most sensitive patient data\u2014including Social Security numbers, financial information and credit card information\u2014were not affected by the breach.

Potentially compromised data included member names, dates of birth, diagnosis codes, provider information and information used for claims processing, such as claim numbers, referral numbers and service dates.

Also See<\/b>: Hacker accesses email accounts, PHI at retirement communities<\/a>

Upon learning of the breach, the insurer permanently removed the file from the website, reviewed company policies and procedures, and added additional technical controls to prevent reoccurance of such an incident. \u201cWe also ensured that the appropriate action was taken with the employee responsible for uploading the subject file,\u201d the insurer noted.

In addition to providing two years of identity protection services, Independence Blue Cross also provided affected individuals information on protecting themselves against identity theft or financial loss, and encouraged placing fraud alerts with the major credit bureaus.","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Employee upload of data causes breach at Philly’s Blues plan

More for you