Service Benefit Plan Administrative Services

The covered entity (CE), Service Benefit Plan Administrative Services Corporation, reported that a programming error exposed the electronic protected health information (ePHI) of 11,536 individuals via its mobile application. The ePHI involved included names, addresses, health insurance information, claims information, financial data, treatment information, and medications prescribed. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its ePHI.