Philadelphia-based insurer Independence Blue Cross says about 17,000 people have been affected by a data breach.
The company says an employee uploaded member information, such as names, birth dates, and diagnosis codes, to a public website. Social security numbers, financial information and credit information were not involved in the breach.
Most of the affected members live in Pennsylvania and New Jersey.
IBC says it is notifying affected members and offering 24 months of free credit monitoring and identity protection services in the wake of the breach.
The company says it has also taken "appropriate action" with the employee responsible for uploading the subject file.
For more information on the breach, see here.