Endeavor Energy Resources
Disclosed Feb 20, 20206 years ago11,014 affectedConfirmed
The covered entity (CE), Endeavor Energy Resources, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of approximately 5,103 individuals. The CE notified HHS, affected individuals, and the media. The ePHI involved included names and health insurance information. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI. Employees were also trained on the proper methods of recognizing and responding to fraudulent email communications.
What is known
| People affected | 11,014 (as reported by the organization) |
|---|---|
| Disclosed | Feb 20, 2020 |
| Happened | Jan 14, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Energy · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: Endeavor Energy Resourcesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Endeavor Energy Resources (Health Plan, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 20, 2020 | 5 |
| HHS archivetotal | Feb 20, 2020 | 5,103 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Endeavor Energy Resources, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of approximately 5,103 individuals. The CE notified HH · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.