UnitedHealth Group Single Affiliated Covered Entity (SACE)

United Health Group (UHG), the covered entity (CE), reported that names of members of its Louisiana Medicaid Plan were incorrectly matched with the wrong addresses, which resulted in letters being mailed to the incorrect recipients. The breach affected approximately 5,330 individuals. The protected health information (PHI) involved included names, treatment information, and claims information. UHG notified OCR, all affected individuals, and prominent media outlets. Individuals affected by the breach were offered one year of free identity theft services. UHG is working on an automated solution to resolve mailing errors. Additionally, the CE provided OCR documentation to substantiate all of the corrective action steps taken.