Branch Metrics
Disclosed Apr 6, 20265 months ago857 affectedConfirmed
The covered entity (CE), Branch Metrics, Inc., reported that its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of approximately 857 individuals. The PHI involved names, dates of birth, and social security numbers. The CE notified HHS and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 857 (as reported to HHS) |
|---|---|
| Disclosed | Apr 6, 2026 |
| Happened | Dec 22, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2026 data breach report: Branch Metricsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Branch Metrics (Health Plan, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Apr 6 | 6 |
| HHS archivetotal | Apr 10 | 857 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 855 to 857 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Branch Metrics, Inc., reported that its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of approximately 857 individuals. The PHI involved names, date · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.