Breachesby Glyphathenahealth
Disclosed Nov 15, 20241,974 affectedConfirmed
Athenahealth, the covered entity (CE), reported that an employee posted the protected health information (PHI) of 1,974 individuals to the Internet. The PHI involved included names, addresses, dates of birth, Social Security numbers, and health insurance and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. The staff involved in this disclosure were retrained.
What is known
| People affected | 1,974 (as reported by the organization) |
|---|---|
| Disclosed | Nov 15, 2024 |
| Happened | Apr 3, 2024 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
other to healthby backfillSource
unknown to insiderby backfillSource
[] to ["names","health"]by backfillSource
empty to Athenahealth, the covered entity (CE), reported that an employee posted the protected health information (PHI) of 1,974 individuals to the Internet. The PHI involved included names, addresses, dates of birth, Social Security numbers, and heby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.