Health profile and care summaries and corresponding covering letters were incorrectly mailed to senior members of the covered entity (CE), Highmark Health, and their physicians. The protected health information involved in the hack included the names, addresses, phone numbers, dates of birth, unique medical identifiers (UMI), gender, medications, and health information of 2,589 individuals. The ce provided cut notification to HHS, the media, and affected individuals. following the hack, the ce issued a new UMI to each member impacted by the incident. The ce determined that a process failure by an employee was the root cause for the incorrect mailing and subsequently terminated the employee. as a resultant of OCR's investigation, the ce instituted new quality refresh procedures for mailings and retrained employees on its concealment practices and departmental policies, processes and procedures. OCR obtained details of the CE's revised policies on its health profiles to assure they include only the minimum necessary information. Location of hacked information: Paper/Films concern associate present: Yes