AP reports:
Blue Cross Blue Shield of Nebraska said Thursday that it mistakenly disclosed personal dental claims information in statements to more than 1,800 customers.
The company said a printing error caused some dental explanation of benefits forms to be sent to the wrong customers. The forms reveal treatment and services that the insurer paid on a customer’s behalf.
Read more on Omaha.com.
It’s not clear whether this breach involved a vendor or was an in-house error. Thankfully, it seems that it was member ID number and not SSN that were used as identifiers.
There is no notice at this time on the insurer’s web site, but if they notified everyone, I don’t expect to see one. I do expect we’ll see this on HHS’s public breach tool, though.