Providence Health Plan, the covered entity (CE), reported that its business associate inadvertently posted the electronic protected health information (ePHI) of approximately 75,663 individuals to the Internet. The ePHI involved included names, dates of birth, and health insurance information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Complimentary credit and identity theft monitoring services was also provided. OCR provided technical assistance to the CE.
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 49511 · backfill source
2026-09-25 · summary: empty to Providence Health Plan, the covered entity (CE), reported that its business associate inadvertently posted the electronic protected health information (ePHI) of approximately 75,663 individuals to the Internet. The ePHI involved included na · backfill source
2026-09-25 · disclosed: 2019-08-13 to 2019-03-19 · backfill source
2026-09-25 · disclosed: 2020-06-16 to 2019-08-13 · backfill source
