Breachesby GlyphCVS Caremark
Disclosed Jun 28, 20213,064 affectedConfirmed
The covered entity (CE), CVS Caremark, reported that an employee mailed the electronic protected health information (ePHI) of 3,064 individuals to the wrong recipients. The ePHI involved included names, diagnoses, and health insurance information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE retrained its staff and implemented additional administrative safeguards.
What is known
| People affected | 3,064 (as reported to HHS) |
|---|---|
| Disclosed | Jun 28, 2021 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at CVS Caremark
Insider breachInsider exposed names and health records. Reported to the HHS archive.2,599 affectedHealthcareUSMay 13, 2025Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.4,305 affectedHealthcareUSOct 26, 2012Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.654 affectedHealthcareUSMay 11, 2011
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.