Breachesby GlyphAetna
Disclosed Feb 27, 2026775 affectedConfirmed
The business associate (BA), Aetna, reported that an employee mailed the protected health information (PHI) of 775 individuals to the wrong recipients. The PHI involved included demographic information. The BA notified HHS and the affected individuals. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.
What is known
| People affected | 775 (as reported to HHS) |
|---|---|
| Disclosed | Feb 27, 2026 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Aetna
Breach, details not statedExposed names, health records and insurance details. Reported to the California AG.326K affectedInsuranceUSJul 27, 2022Breach, details not statedExposed names, health records and insurance details. Reported to the California AG.484K affectedInsuranceUSDec 10, 2020Hacking breachHacking exposed names and health records. Reported to the HHS archive.12K affectedInsuranceUSAug 29, 2017Insider breachInsider exposed names and health records. Reported to the HHS archive.19K affectedInsuranceUSNov 28, 2016Insider breachInsider exposed names and health records. Reported to the HHS archive.6,372 affectedInsuranceUSJul 27, 2010Web site breach may have exposed SSNs of 65,000 Aetna employeesHacking exposed emails and Social Security numbers.Hacking65K affectedInsuranceUSUnverifiedMay 28, 2009
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.