CBIZ KA Consulting Services
Disclosed Nov 10, 20232 years ago436,198 affectedConfirmed
The business associate (BA), CBIZ KA Consulting Services, reported that a software application used by its vendor exposed the protected health information (PHI) of 436,198 individuals. The PHI involved included names, dates of birth, addresses, Social Security and drivers’ license numbers, diagnoses, financial and health insurance information, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 436,198 (as reported to HHS) |
|---|---|
| Disclosed | Nov 10, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): CBIZ KA Consulting Services (Business Associate, NJ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 10, 2023 | 436,198 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.