The covered entity (CE), Alliant Health Plans, reported that an employee mailed the protected health information (PHI) of 695 individuals to the wrong recipients. The PHI involved included names, and addresses. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE offered free credit monitoring, sanctioned the workforce member, and implemented new administrative and technical safeguards. Staff were retrained.
