Health insurer Aetna settled to pay $17 million in reparations after a major mailing mishap revealed the HIV status of thousands of patients.

According to court documents, the display windows of large mailing envelopes revealed confidential medical information. The mailings were sent to approximately 12,000 customers in at least 23 states.

"We've had a number of people tell us they had chosen not to disclose their HIV status to family members—but this is how their family members found out," Sally Friedman, legal director at Legal Action Center, told STAT when the breach happened last August.