The Portland, Ore.-based public health plan administrator said the breach occurred Jan. 27 after a contracted consultant received protected health information in an email attachment. Information included member names, ID numbers for Medicare and some Medicaid plans, and dates of birth.
CareOregon Advantage was notified of the breach, the document was destroyed and affected members were notified. After investigating, CareOregon believes there is a low risk of fraud or identity theft. It encouraged members to review account statements, credit reports and set a fraud alert.
