SAMBA Federal Employee Benefit Association recently learned of an incident that has affected information related to eligible family members of subscribers.
They are covered by the SAMBA Federal Employees Health Benefits Plan in 2017.
A programming error occurred whereby some subscribers received a Form 1095-B containing the name and Social Security number for one or more family members of another plan subscriber.
All subscribers received a Form 1095-B that was erroneously dated 2016.
SAMBA became aware of the issue on or around February 22, 2018.
SAMBA corrected the programming error and mailed corrected 2017 Form 1095-B notices to all subscribers.
The incorrect 2016 Form 1095-B notices were not submitted to the Internal Revenue Service.
This incident did not disclose any subscriber’s Social Security number.
SAMBA confirmed that in some cases Form 1095-Bs containing family members’ names, Social Security numbers, and periods of health insurance coverage during the 2017 tax year were mailed to the incorrect subscriber.
"id": "SAM143010622",
"linkid": "samba",
"type": "Data Leak",
"date": "03/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"