The covered entity (CE), Aetna ACE, reported that a vendor of its business associate experienced a cyber-attack that compromised the protected health information (PHI) of 9,191 individuals. The PHI involved included names, addresses/zip codes, birthdates and other identifiers. The CE notified HHS and affected individuals.
2026-09-25 · disclosed: 2020-12-22 to 2020-07-29 · backfill source
2026-09-25 · records: 325278 to 484157 · backfill source
2026-09-25 · disclosed: 2021-05-26 to 2020-12-22 · backfill source
2026-09-25 · disclosed: 2021-07-14 to 2021-05-26 · backfill source
2026-09-25 · disclosed: 2021-09-22 to 2021-07-14 · backfill source
2026-09-25 · disclosed: 2022-02-15 to 2021-09-22 · backfill source
2026-09-25 · disclosed: 2022-07-27 to 2022-02-15 · backfill source
2026-09-25 · records: 9191 to 325278 · backfill source
2026-09-25 · disclosed: 2022-12-23 to 2022-07-27 · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: organization to hhs · backfill source
2026-09-25 · records: 110 to 9191 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Aetna ACE, reported that a vendor of its business associate experienced a cyber-attack that compromised the protected health information (PHI) of 9,191 individuals. The PHI involved included names, addresses/zip cod · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 110 · backfill source
2026-09-25 · disclosed: 2024-02-28 to 2022-12-23 · backfill source
