Community Health Plan of Washington
Disclosed Dec 21, 2016381,504 affectedConfirmed
Vendor's unsecured FTP server exposes data of 381,504 health plan members
Business associate Transactions Application Group failed to secure a port on an FTP server, allowing unauthorized access to names, addresses, birth dates, Social Security numbers and claims codes of 381,504 plan members.
What is known
| People affected | 381,504 (as reported by the organization) |
|---|---|
| Disclosed | Dec 21, 2016 |
| Discovered | Nov 30, 2016 |
| Happened | Jan 16, 2016 |
| Attack | Vendor breach |
| Data exposed | NamesAddressesDates of birthSocial Security numbersHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsxby backfillSource
health to insuranceby seedSource
hacking to third-partyby seedSource
[] to ["names","addresses","dob","ssn","health"]by seedSource
empty to organizationby seedSource
empty to 381504by seedSource
empty to Business associate Transactions Application Group failed to secure a port on an FTP server, allowing unauthorized access to names, addresses, birth dates, Social Security numbers and claims codes of 381,504 plan members.by seedSource
empty to Vendor's unsecured FTP server exposes data of 381,504 health plan membersby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.