Breachesby GlyphAnthem
Disclosed Feb 4, 201578,800,000 affectedSettled
2014 data warehouse breach of 78.8M people; USD 16M HHS OCR and USD 39.5M states
Attackers reached Anthem's data warehouse in a 2014 cyberattack and harvested names, birth dates, Social Security numbers, health ID numbers, addresses, emails, phone numbers and employment data of 78.8 million people. Anthem paid HHS OCR a record USD 16M in 2018 and a multistate coalition USD 39.5M in 2020.
What is known
| People affected | 78,800,000 (as reported by the organization) |
|---|---|
| Disclosed | Feb 4, 2015 |
| Discovered | Jan 29, 2015 |
| Happened | Dec 10, 2014 |
| Attack | Hacking |
| Data exposed | NamesDates of birthSocial Security numbersAddressesEmailsEmploymentInsurancePhone numbersHealth |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | USD 16M HHS OCR settlement (Oct 2018); USD 39.5M multistate AG settlement (Sept 2020) (about $56M) |
Sources
California Attorney General breach notice: AnthemData Breach at Health Insurer Anthem Could Impact MillionsAnthem Pays OCR $16 Million in Record HIPAA Settlement Following Largest U.S. Health Data Breach in HistoryAnthem 10-K for fiscal 2014NY AG: USD 39.5 Million after Anthem's 2014 data breachAnthem medical data breach (Wikipedia)Health Insurance Provider Anthem Reports Massive Data BreachHHS: Anthem pays OCR $16 Million in record HIPAA settlementMaine Attorney General breach notice archive: AnthemHHS OCR breach report (archive, resolved): Anthem (Health Plan, IN)
Notices filed
Other breaches at Anthem
Hacking breachHacking exposed names and health records. Reported to the California AG.6,118 affectedHealthcareUSOct 15, 2021Insider breachInsider exposed names and health records. Reported to the HHS archive.19K affectedInsuranceUSOct 26, 2016Breach, details not statedExposed names and Social Security numbers. Reported to the Maine AG.InsuranceUSMar 20, 2013Tapes with names and SSNs of 196,000 members stolen from vendorVendor breach exposed names and Social Security numbers.Vendor breach196K affectedInsuranceUSUnverifiedJan 26, 2007
History of this record
["names","dob","ssn","addresses","emails","employment","insurance","phone"] to ["names","dob","ssn","addresses","emails","employment","insurance","phone","health"]by backfillSource
empty to 2014-12-10by backfillSource
16000000 to 55500000by seedSource
$16M HHS OCR HIPAA settlement (2018) to USD 16M HHS OCR settlement (Oct 2018); USD 39.5M multistate AG settlement (Sept 2020)by seedSource
["names","dob","ssn","addresses","emails","employment","insurance"] to ["names","dob","ssn","addresses","emails","employment","insurance","phone"]by seedSource
Anthem disclosed that attackers broke into its IT systems and stole personal data including Social Security numbers from all business lines; HHS OCR said the attack exposed health plan data of almost 79 million people and Anthem paid a reco to Attackers reached Anthem's data warehouse in a 2014 cyberattack and harvested names, birth dates, Social Security numbers, health ID numbers, addresses, emails, phone numbers and employment data of 78.8 million people. Anthem paid HHS OCR aby seedSource
Sophisticated cyber attack on health insurer exposes member and employee data to 2014 data warehouse breach of 78.8M people; USD 16M HHS OCR and USD 39.5M statesby seedSource
confirmed to settledby seedSource
empty to 16000000by seedSource
empty to $16M HHS OCR HIPAA settlement (2018)by seedSource
other to insuranceby seedSource
unknown to hackingby seedSource
[] to ["names","dob","ssn","addresses","emails","employment","insurance"]by seedSource
empty to organizationby seedSource
empty to 78800000by seedSource
2015-02-13 to 2015-02-04by seedSource
empty to 2015-01-29by seedSource
empty to Anthem disclosed that attackers broke into its IT systems and stole personal data including Social Security numbers from all business lines; HHS OCR said the attack exposed health plan data of almost 79 million people and Anthem paid a recoby seedSource
empty to Sophisticated cyber attack on health insurer exposes member and employee databy seedSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.