DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

CalOptima Reports Potential Loss of Patient Claims Information (updated)

Posted on October 26, 2009 by Dissent

From CalOptima’s web site:

ORANGE, Calif. (October 23, 2009) – CalOptima has identified the potential loss of past medical claims information for approximately 68,000 of its members that was stored on electronic media devices.

CalOptima’s claims scanning vendor sent the electronic media devices to CalOptima through the U.S. Postal service by certified mail. On Tuesday, October 13, 2009, CalOptima discovered the apparent loss of the devices when the external packaging materials were delivered by the U.S. Postal Service without the box containing the devices. CalOptima immediately initiated an investigation to determine the location of the devices, including the possibility that the separated box containing the devices may have been forwarded by the U.S. Post Office to another U.S. Post Office facility. On Wednesday, October 14, 2009, CalOptima notified state and federal agencies of the potential loss of the devices, and on the following day, posted an alert for public notification on its Web site when it became evident the devices might not be located. CalOptima, its vendor, and the U.S. Postal Service are continuing to search for the box containing the devices. Claims information contained on the devices includes member names, home addresses, dates of birth, medical procedure codes, diagnosis codes and member identification numbers, including some Social Security numbers. The devices contained only copies of historical processed claims information. CalOptima has identified the affected members and is preparing to send them notice letters. For more information, CalOptima members should call CalOptima at 1-800-509-4225.

According to CalOptima’s web site, their network of doctors and hospitals includes more than 5,000 primary care doctors and specialists and 24 hospitals serving nearly 380,000 members.

Hat-tip, Joseph Goedert of Health Data Management

Update of 10-29: see Comment from cheat-seeker, below, indicating that the disks were recovered.


Related:

  • Two U.K. teenagers appear in court over Transport of London cyber attack
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Gatineau gymnastics centre warns members of possible data breach
  • Data breach in 42 Latvian municipalities: DVI imposes 300,000 euro fine on ZZ Dats
  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
  • Resource: NY DFS Issues New Cybersecurity Guidance to Address Risks Associated with the Use of Third-Party Service Providers
Category: Breach IncidentsHealth DataLost or MissingOf NoteSubcontractorU.S.

Post navigation

← TD Ameritrade settlement rejected
NHS staff to improve data handling after details of cancer patients go missing →

2 thoughts on “CalOptima Reports Potential Loss of Patient Claims Information (updated)”

  1. cheat-seeker says:
    October 29, 2009 at 3:03 pm

    This matter was successfully resolved. From the Healthy Living blog at today’s Orange County Register:

    Lost personal information of Medi-Cal members is found
    October 29th, 2009, 6:00 am by Courtney Perkes

    CalOptima, the county’s Medi-Cal provider, has found lost electronic claims records that contain identifying information belonging to as many as 68,000 members.

    Discs of data were lost two weeks ago after being sent certified mail by CalOptima’s scanning vendor. When only the packaging arrived, but not the box with the discs, CalOptima notified the state. On Wednesday, the U.S. Postal Service located the discs in Atlanta, said Margaret Tatar, director of public affairs.

    The discs were not password protected, but it appears no one accessed the confidential information, Tatar said.

    CalOptima had planned to send letters notifying members of the lost information and offering them credit monitoring services. Anyone with questions should call 800-509-4225 or visit http://www.caloptima.org

    The medical record data for adults and children included names, addresses, birthdays and some Social Security numbers.

    1. admin says:
      October 29, 2009 at 3:23 pm

      Thanks!

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Threat actors have reportedly launched yet another campaign involving an application connected to Salesforce
  • Russian hackers target IVF clinics across UK used by thousands of couples
  • US, allies sanction Russian bulletproof hosting services for ransomware support
  • Researchers claim ‘largest leak ever’ after uncovering WhatsApp enumeration flaw
  • Large medical lab in South Africa suffers multiple data breaches
  • Report released on PowerSchool cyber attack
  • Sue The Hackers – Google Sues Over Phishing as a Service
  • Princeton University Data Breach Impacts Alumni, Students, Employees
  • Eurofiber admits crooks swiped data from French unit after cyberattack
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Closing the Privacy Gap: HIPRA Targets Health Apps and Wearables
  • Researchers claim ‘largest leak ever’ after uncovering WhatsApp enumeration flaw
  • CIPL Publishes Discussion Paper Comparing U.S. State Privacy Law Definitions of Personal Data and Sensitive Data
  • India’s Digital Personal Data Protection Act 2023 brought into force
  • Five major changes to the regulation of cybersecurity in the UK under the Cyber Security and Resilience Bill

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.