Aon, a business associate (BA) and covered entity (CE), reported that it experienced a ransomware incident that affected the protected health information (PHI) of 129,682 individuals. The PHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, health insurance information, and other treatment information. The BA/CE notified HHS, affected individuals, and the media. In response to the breach, the BA/CE offered complimentary credit monitoring and identity theft protection services and implemented additional administrative and technical safeguards. Staff were also retrained on protecting and securing PHI.
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: organization to hhs · backfill source
2026-09-25 · records: 31799 to 129682 · backfill source
2026-09-25 · summary: empty to Aon, a business associate (BA) and covered entity (CE), reported that it experienced a ransomware incident that affected the protected health information (PHI) of 129,682 individuals. The PHI involved included names, dates of birth, Social · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 31799 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2022-02-25 · backfill source
