Anthem, Inc.

LaunchPoint Ventures, LLC, a business associate (BA) of Anthem, Inc., the covered entity (CE), reported that an employee impermissibly emailed the protected health information (PHI) of 18,580 members of the CE to his personal email account. This information was used for identity theft purposes. The PHI involved included names, dates of birth, Social Security numbers, health insurance information, and other treatment information. The CE notified HHS, the media, and affected individuals. As a result of this breach, LaunchPoint offered free identity theft protection and credit repair/monitoring services to all affected individuals and implemented additional administrative safeguards to further protect its PHI. The BA also sanctioned the employee responsible and retrained all employees. OCR obtained assurances that the BA implemented the corrective actions noted above.