Benefit Plan Administrators
Disclosed Jun 27, 20224 years ago5,004 affectedConfirmed
Benefit Plan Administrators, the business associate (BA), reported that it experienced a cyber- attack that compromised the protected health information (PHI) of 1,457 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, gender, claims information, medications, and diagnoses. In response to the incident, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 5,004 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Benefit Plan Administrators (Business Associate, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 27, 2022 | 735 |
| HHS archivetotal | Jun 29, 2022 | 1,145 |
| HHS archivetotal | Jun 30, 2022 | 628 |
| HHS archivetotal | Jul 8, 2022 | 878 |
| HHS archivetotal | Jul 22, 2022 | 5,004 |
| HHS archivetotal | Jul 25, 2022 | 1,457 |
History of this record
- 2026-09-25 · disclosed: 2022-06-29 to 2022-06-27 · backfill source
- 2026-09-25 · disclosed: 2022-06-30 to 2022-06-29 · backfill source
- 2026-09-25 · disclosed: 2022-07-08 to 2022-06-30 · backfill source
- 2026-09-25 · disclosed: 2022-07-22 to 2022-07-08 · backfill source
- 2026-09-25 · records: 1457 to 5004 · backfill source
- 2026-09-25 · disclosed: 2022-07-25 to 2022-07-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.