Anthem ACE
Disclosed Sep 30, 20223 years ago13,406 affectedConfirmed
Anthem ACE, the covered entity (CE), learned that its business associate (BA) inadvertently posted the protected health information (PHI) of 13,406 individuals on the Internet. This information was then exfiltrated. The PHI involved included names, addresses, dates of birth, and Social Security numbers. The CE notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative and technical safeguards and retrained its staff to better protect PHI.
What is known
| People affected | 13,406 (as reported to HHS) |
|---|---|
| Disclosed | Sep 30, 2022 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Anthem ACE (Health Plan, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 30, 2022 | 13,406 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.