Subsequent to Triple-S Management entering into a Resolution Agreement/Corrective Action Plan (RA/CAP) with OCR on November 20, 2015, its subsidiary, Triple-S Advantage, reported a mass mailing error to certain providers that caused correspondences to be printed with incorrect addresses, disclosing the protected health information of 36,305 beneficiaries. Triple-S Advantage provided breach notification to HHS, the media, and the affected individuals, including any required substitute notice to the affected individuals. Following the breach, Triple-S Advantage provided OCR with written assurances that it investigated the incident and took several steps to address and mitigate the breach incident pursuant to the RA/CAP.
