Every public data breach

44 disclosed this week · 26,355 on record

Triple-S Salud

Disclosed Nov 8, 201356,853 affectedConfirmed

Official notice

Triple-S Management Corporation (“TRIPLE-S”), on behalf of its wholly owned subsidiaries, Triple-S Salud Inc., Triple-C Inc. and Triple-S Advantage Inc. , formerly known as American Health Medicare Inc., has agreed to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR). TRIPLE-S will pay $3.5 million and will adopt a robust corrective action plan to correct deficiencies in its HIPAA compliance program, an effort it has already begun. “OCR remains committed to strong enforcement of the HIPAA Rules,” said OCR Director Jocelyn Samuels. “This case sends an important message for HIPAA Covered Entities not only about compliance with the requirements of the Security Rule, including risk analysis, but compliance with the requirements of the Privacy Rule, including those addressing business associate agreements and the minimum necessary use of protected health information.” TRIPLE-S is an insurance holding company based in San Juan, Puerto Rico, which offers a wide range of insurance products and services to residents of Puerto Ri

What is known

People affected56,853 (as reported to HHS)
DisclosedNov 8, 2013
AttackInsider
Data exposedNamesHealth
SectorInsurance · US
StatusConfirmed

Sources

Notices filed

Other breaches at Triple-S Salud

History of this record
disclosed2026-09-25
2014-04-02 to 2013-11-08by backfillSource
disclosed2026-09-25
2014-04-15 to 2014-04-02by backfillSource
disclosed2026-09-25
2014-05-29 to 2014-04-15by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Triple-S Salud