2009 — Crescent Health Inc.: Names, dates of birth and Social Security numbers…
Data compromised
Personal information
Technical writeup
Names, dates of birth and Social
Security numbers of roughly 28,000 state retirees were e-mailed to the
Kentucky Retirement Systems without being properly encrypted for security
purposes by its pharmacy benefit provider. The e-mail contained dates
of birth, Social Security numbers and health insurance claim numbers
but not personal health information. The file contained information
only on members who were both Medicare-eligible a
Root cause
Unintended disclosure