Quick Facts

• Date: 3/10/2010
• Institution: Brown University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 500
• Source: DataBreaches.net
• Abstract Source: Brown Daily Herald

Abstract
Brown University was recently notified that employee records were accidentally sent to an unauthorized company. A Blue Cross Blue Shield employee mistakenly sent paper records of 500 Brown University employees to another company in December. These records included names, Blue Cross subscriber numbers and charges but did not include health information or Social Security numbers. Brown officials were notified on January 5th about the mistake. Brown’s Information Security, Human Resources and Legal officials worked to ensure that Blue Cross Blue Shield took steps to protect the affected Brown employees including recovering all paper copies sent out, notifying the affected individuals, offering the individuals the ability to change the subscriber numbers and an on-going review of charges for the next six months.