Clover Health

Clover Health, the covered entity (CE), reported that an employee of its business associate (BA) posted the protected health information (PHI) of 2,834 individuals to the Internet. The PHI involved included names, birthdates, addresses, phone numbers, and other treatment information. Clover Health notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA sanctioned the responsible employee and strengthened its administrative and technical safeguards.