BlueCross BlueShield of Tennessee, the business associate (BA), reported that it inadvertently posted the protected health information (PHI) of 717 individuals to the Internet. The PHI involved included subscriber/member identification numbers. The BA notified HHS and affected individuals. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect sensitive data.
