Skip to content
Network USA

HHS OCR report · 2018

Blue Cross and Blue Shield of North Carolina (Blue Cross NC) data breach

Blue Cross and Blue Shield of North Carolina (Blue Cross NC), a health plan in North Carolina, reported a breach affecting 631 individuals to HHS OCR on Oct 11, 2018.

OCR report facts

Covered entity
Blue Cross and Blue Shield of North Carolina (Blue Cross NC)
Entity type
Health Plan
Individuals affected
631
Submission date
Oct 11, 2018
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Paper/Films
Business associate present
No
Status
Archive (closed)

OCR description

In response to member telephone complaints, the covered entity (CE), Blue Cross Blue Shield of North Carolina, investigated and determined that on September 26, 2018, the CE mistakenly sent low income subsidy (LIS) letters to the wrong members due to an employee’s failure to follow established quality review procedures. Each letter contained the name and Blue Cross NC ID number for another member. Following the incident, the CE sanctioned the responsible staff member by coaching her and tas...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Blue Cross and Blue Shield of North Carolina (Blue Cross NC) data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Blue Cross and Blue Shield of North Carolina (Blue Cross NC) legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Blue Cross and Blue Shield of North Carolina (Blue Cross NC).