Byham's Insurance Services
Disclosed Jun 27, 20197 years ago1,600 affectedConfirmed
An employee of Byham’s Insurance Services, a business associate (BA), emailed protected health information (PHI) to her husband. The breach included the names, insurance coverages, insurance carriers, policy numbers, effective dates and premium amounts for 1,600 individuals. The BA provided breach notification to HHS and affected individuals. Following the breach, the BA sanctioned the involved employee and notified law enforcement. OCR provided technical assistance on how to appropriately respond to future breaches, including media notice. As a result of OCR’s investigation, the BA completed a risk assessment.
What is known
| People affected | 1,600 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2019 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Byham's Insurance Services (Healthcare Clearing House, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 27, 2019 | 1,600 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.