Every public data breach

44 disclosed this week · 26,355 on record

Defense Health Headquarters

Disclosed Oct 4, 20193,500 affectedConfirmed

Official notice

The covered entity (CE), Defense Health Headquarters, reported that its business associate (BA) was the victim of a cyber-attack that affected the electronic protected health information of 1,620 individuals. The ePHI involved included names, Social Security numbers, birthdates, health insurance information, addresses, and treatment information. The CE notified HHS and affected individuals. The BA implemented additional administrative, technical, and security safeguards to better protect its ePHI. OCR obtained assurances that the BA undertook the corrective actions noted.

What is known

People affected3,500 (as reported to HHS)
DisclosedOct 4, 2019
AttackHacking
Data exposedNamesHealth
SectorInsurance · US
StatusConfirmed

Sources

Notices filed

History of this record
records2026-09-25
1620 to 3500by backfillSource
disclosed2026-09-25
2020-09-09 to 2019-10-04by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Defense Health Headquarters