HHS OCR report · 2014
MetroPlus Health Plan, Inc. data breach
OCR report facts
- Covered entity
- MetroPlus Health Plan, Inc.
- Entity type
- Health Plan
- State
- New York
- Individuals affected
- 31,980
- Submission date
- Nov 20, 2014
- Type of breach
- Other
- Location of breached information
- Business associate present
- No
- Status
- Archive (closed)
OCR description
An employee of Metro Plus Health Plan, Inc., emailed two unencrypted files to her personal and work email addresses containing the electronic protected health information (ePHI) of 31,980 members of the health plan, which included members’ names, addresses, dates of birth and social security numbers. Metro Plus Health Plan, the covered entity (CE), provided breach notification to HHS, the media, and affected individuals, including the offer of one year of credit monitoring services. The CE a...
Text as published on the HHS OCR breach portal.
Other reports by MetroPlus Health Plan, Inc.
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| MetroPlus Health Plan, Inc. | NY | Health Plan | 15,212 | Sep 1, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
Frequently asked questions
How many people were affected by the MetroPlus Health Plan, Inc. data breach?
The report to HHS OCR lists 31,980 individuals affected.
When was it reported to HHS?
It was submitted to HHS OCR on Nov 20, 2014.
What type of breach was it?
The OCR portal lists the type of breach as Other, with the breached information located in: Email.
Is the investigation still open?
No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.
Is a breach notice letter from MetroPlus Health Plan, Inc. legitimate?
This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.
Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or MetroPlus Health Plan, Inc..