Anthem
Disclosed Feb 4, 201511 years ago78,800,000 affectedSettled
2014 data warehouse breach of 78.8M people; USD 16M HHS OCR and USD 39.5M states
Attackers reached Anthem's data warehouse in a 2014 cyberattack and harvested names, birth dates, Social Security numbers, health ID numbers, addresses, emails, phone numbers and employment data of 78.8 million people. Anthem paid HHS OCR a record USD 16M in 2018 and a multistate coalition USD 39.5M in 2020.
What is known
| People affected | 78,800,000 (as reported by the organization) |
|---|---|
| Disclosed | Feb 4, 2015 |
| Discovered | Jan 29, 2015 |
| Happened | Dec 10, 2014 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Social Security numbers, Addresses, Emails, Employment, Insurance, Phone numbers, Health |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | USD 16M HHS OCR settlement (Oct 2018); USD 39.5M multistate AG settlement (Sept 2020) (about $56M) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Anthemoag.ca.gov · Official notice | Official notice |
| Data Breach at Health Insurer Anthem Could Impact Millionskrebsonsecurity.com · News | News |
| Anthem Pays OCR $16 Million in Record HIPAA Settlement Following Largest U.S. Health Data Breach in Historyweb.archive.org · Regulator | Regulator |
| Anthem 10-K for fiscal 2014sec.gov · SEC filing | SEC filing |
| NY AG: USD 39.5 Million after Anthem's 2014 data breachag.ny.gov · Regulator | Regulator |
| Anthem medical data breach (Wikipedia)en.wikipedia.org · News | News |
| Health Insurance Provider Anthem Reports Massive Data Breachtechcrunch.com · News | News |
| HHS: Anthem pays OCR $16 Million in record HIPAA settlementhhs.gov · Regulator | Regulator |
| Maine Attorney General breach notice archive: Anthemmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Anthem (Health Plan, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Feb 4, 2015 | 78,800,000 |
| Researchtotal | Feb 4, 2015 | 78,800,000 |
| Maine AGresidents of ME | Feb 6, 2015 | |
| California AGresidents of CA | Feb 13, 2015 | |
| HHS archivetotal | Feb 13, 2015 | 78,800,000 |
Other breaches at Anthem
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Oct 15, 2021Oct 15, 20214 years agoHacking | Oct 15, 20214 years ago | Hacking | Healthcare | Confirmed | 6,118 |
| Disclosed Oct 26, 2016Oct 26, 20169 years agoInsider | Oct 26, 20169 years ago | Insider | Insurance | Confirmed | 19K |
| Disclosed Mar 20, 2013Mar 20, 201313 years ago | Mar 20, 201313 years ago | Not stated | Insurance | Confirmed | Unknown |
| Tapes with names and SSNs of 196,000 members stolen from vendorJan 26, 200719 years agoVendor breachUnverified | Jan 26, 200719 years ago | Vendor breach | Insurance | Unverified | 196K |
History of this record
- 2026-09-25 · data_types: ["names","dob","ssn","addresses","emails","employment","insurance","phone"] to ["names","dob","ssn","addresses","emails","employment","insurance","phone","health"] · backfill source
- 2026-09-25 · occurred: empty to 2014-12-10 · backfill source
- 2026-09-25 · fine_usd: 16000000 to 55500000 · seed source
- 2026-09-25 · lawsuit: $16M HHS OCR HIPAA settlement (2018) to USD 16M HHS OCR settlement (Oct 2018); USD 39.5M multistate AG settlement (Sept 2020) · seed source
- 2026-09-25 · data_types: ["names","dob","ssn","addresses","emails","employment","insurance"] to ["names","dob","ssn","addresses","emails","employment","insurance","phone"] · seed source
- 2026-09-25 · summary: Anthem disclosed that attackers broke into its IT systems and stole personal data including Social Security numbers from all business lines; HHS OCR said the attack exposed health plan data of almost 79 million people and Anthem paid a reco to Attackers reached Anthem's data warehouse in a 2014 cyberattack and harvested names, birth dates, Social Security numbers, health ID numbers, addresses, emails, phone numbers and employment data of 78.8 million people. Anthem paid HHS OCR a · seed source
- 2026-09-25 · title: Sophisticated cyber attack on health insurer exposes member and employee data to 2014 data warehouse breach of 78.8M people; USD 16M HHS OCR and USD 39.5M states · seed source
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · fine_usd: empty to 16000000 · seed source
- 2026-09-25 · lawsuit: empty to $16M HHS OCR HIPAA settlement (2018) · seed source
- 2026-09-25 · sector: other to insurance · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: [] to ["names","dob","ssn","addresses","emails","employment","insurance"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 78800000 · seed source
- 2026-09-25 · disclosed: 2015-02-13 to 2015-02-04 · seed source
- 2026-09-25 · discovered: empty to 2015-01-29 · seed source
- 2026-09-25 · summary: empty to Anthem disclosed that attackers broke into its IT systems and stole personal data including Social Security numbers from all business lines; HHS OCR said the attack exposed health plan data of almost 79 million people and Anthem paid a reco · seed source
- 2026-09-25 · title: empty to Sophisticated cyber attack on health insurer exposes member and employee data · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.