Triple-S, an insurance holding company and subsidiary of Triple-S Management Corporation, was notified by the Puerto Rican Health Insurance Administration (“HIA”) that HIA would pursue penalties against Triple-S for its alleged failure to properly respond to a breach of protected health information (“PHI”) involving 13,336 Dual Eligible Medicare enrollees (enrollees also eligible for Medicaid). Though Triple-S stated that it had complied with its breach response requirements, including complying with requests from HIA, HIA is still seeking over $6.8 million dollars in penalties against Triple-S for its breach response. Aside from monetary penalties, the sanctions include the suspension of new Dual Eligible Medicare enrollments and impose a duty on Triple-S to notify affected individuals of their right to disenroll.

You can read the full post, view and subscribe to the blog by going to