Robert Weisman reports in The Boston Globe:
CVS Caremark Corp. said Friday that it mistakenly sent letters to about 3,500 Tufts Health Plan members, giving them personal information about the medical conditions and medications of other members enrolled in a supplemental Medicare plan managed by Tufts.
The mistake was due to an unspecified “programming error,” CVS Caremark, pharmacy benefits manager for the Tufts Medicare Preferred Plan, said in a statement.
The “medication information” letters went out to the wrong addresses in late January and early February, mostly to members in Massachusetts. Each letter included another member’s name, the name of a drug prescribed, and the general types of conditions that treatment is used for, according to CVS Caremark, based in Woonsocket, R.I.
The full story is behind a paywall now.
I expect to see this one on HHS’s breach tool.