The covered entity (CE), Continental American Insurance Company, reported that an employee mailed the protected health information (PHI) of 623 individuals to the wrong recipients. The PHI involved included names and insurance information. The CE notified HHS and affected individuals. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect its PHI.
