Blue Cross Blue Shield of Tennessee: $1.5 million, March 13, 2012
http://www.hhs.gov/news/press/2012pres/03/20120313a.html
The investigation followed a notice submitted by BCBST to HHS reporting that 57 unencrypted computer hard drives were stolen from a leased facility in Tennessee. The drives contained the protected health information (PHI) of over 1 million individuals, including member names, social security numbers, diagnosis codes, dates of birth, and health plan identification numbers.