Breachesby GlyphCigna
Disclosed Oct 10, 20183,720 affectedConfirmed
The covered entity (CE), Cigna, reported that its business associate (BA), Availity had fraudulent provider accounts on its provider portal. This breach affected 3,720 individuals and the protected health information (PHI) involved included names, dates of birth, addresses, and health insurance information. Cigna notified HHS, affected individuals, and the media. Cigna also provided two years of complimentary identity protection services.
What is known
| People affected | 3,720 (as reported to HHS) |
|---|---|
| Disclosed | Oct 10, 2018 |
| Discovered | Sep 5, 2018 |
| Happened | Sep 5, 2018 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Cigna
History of this record
other to insuranceby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 3720by backfillSource
empty to The covered entity (CE), Cigna, reported that its business associate (BA), Availity had fraudulent provider accounts on its provider portal. This breach affected 3,720 individuals and the protected health information (PHI) involved includedby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.