Breachesby GlyphByham's Insurance Services
Disclosed Jun 27, 20191,600 affectedConfirmed
An employee of Byham’s Insurance Services, a business associate (BA), emailed protected health information (PHI) to her husband. The breach included the names, insurance coverages, insurance carriers, policy numbers, effective dates and premium amounts for 1,600 individuals. The BA provided breach notification to HHS and affected individuals. Following the breach, the BA sanctioned the involved employee and notified law enforcement. OCR provided technical assistance on how to appropriately respond to future breaches, including media notice. As a result of OCR’s investigation, the BA completed a risk assessment.
What is known
| People affected | 1,600 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2019 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.