Pan-American Life Insurance Group

The covered entity (CE), Pan-American Life Insurance Group, reported that a software application used by its business associate (BA) exposed the protected health information (PHI) of 94,807 individuals. The PHI involved included names, dates of birth, addresses, Social Security and drivers’ license numbers, diagnoses, lab results, medications, financial and claims information, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE and BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI.