Skip to content
Network USA

HHS OCR report ยท 2017

UnitedHealthcare Community Plan of Pennsylvania data breach

UnitedHealthcare Community Plan of Pennsylvania, a business associate in Pennsylvania, reported a breach affecting 614 individuals to HHS OCR on Dec 27, 2017.

OCR report facts

Covered entity
UnitedHealthcare Community Plan of Pennsylvania
Entity type
Business Associate
Individuals affected
614
Submission date
Dec 27, 2017
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Paper/Films
Business associate present
Yes
Status
Archive (closed)

OCR description

On October 16, 2017, a third-party subcontractor of the covered entity (CE), United Healthcare Community Plan, erroneously prepared and mailed a letter (intended for numerous physicians) to 614 health plan members. These letters contained protected health information (PHI) about certain plan members including names, addresses, plan identification numbers, telephone numbers, provider names, and it inferred that a diabetes condition was associated with the member. The CE believed that the erra...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the UnitedHealthcare Community Plan of Pennsylvania data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from UnitedHealthcare Community Plan of Pennsylvania legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or UnitedHealthcare Community Plan of Pennsylvania.