Skip to content

Anthem

Disclosed Oct 15, 20214 years ago6,118 affectedConfirmed

Official notice

The covered entity (CE), Anthem, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information of 6,118 individuals. The PHI involved included names, addresses, dates of birth, email addresses, telephone numbers and treatment information. The CE notified HHS, affected individuals, and the media of the breach. In response to the breach, the CE and BA implemented additional administrative and technical safeguards.

What is known

People affected6,118 (as reported to HHS)
DisclosedOct 15, 2021
HappenedJan 12, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Anthemoag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): Anthem (Business Associate, IN)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAOct 15, 2021
HHS archivetotalOct 15, 20212,023
HHS archivetotalOct 27, 20215,505
California AGresidents of CAOct 28, 2021
HHS archivetotalNov 19, 20216,118
California AGresidents of CADec 31, 2021

Other breaches at Anthem

BreachAffected
Disclosed Oct 26, 2016Oct 26, 20169 years agoInsider19K
2014 data warehouse breach of 78.8M people; USD 16M HHS OCR and USD 39.5M statesFeb 4, 201511 years agoHacking79M
Disclosed Mar 20, 2013Mar 20, 201313 years agoUnknown
Tapes with names and SSNs of 196,000 members stolen from vendorJan 26, 200719 years agoVendor breachUnverified196K
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 6118 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Anthem, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information of 6,118 individuals. The PHI involved included names, addresses, dates of birth, email · backfill source
  • 2026-09-25 · disclosed: 2021-10-28 to 2021-10-15 · backfill source
  • 2026-09-25 · disclosed: 2021-12-31 to 2021-10-28 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Anthem

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.