BlueCross BlueShield of Tennessee, Inc.

ArchivedSubmitted 12/26/2025

State: TN
Covered entity type: Business Associate
Individuals affected: 780
Business associate present: Yes
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Email
First seen by InfoSec Signals: 9/23/2026
Last seen in OCR export: 9/23/2026

OCR description

Blue Cross Blue Shield of Tennessee, Inc., the business associate (BA), reported that an employee of its covered entity (CE) mailed the protected health information of 780 individuals to the wrong recipients. The PHI involved demographic and financial information. In its mitigation efforts, the CE assured the BA that it mailed notification letters to all affected individuals and retrained workforce members.

Change history

9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.