Breachesby GlyphExcellus BlueCross BlueShield
Disclosed Sep 9, 20159,358,891 affectedSettled
Attack dating to 2013 exposes data of up to 10 million Excellus customers
Excellus found on August 5, 2015 that attackers had been in its systems since December 2013. It reported 9.36 million affected individuals to HHS and later paid $5.1 million to settle HIPAA violations.
What is known
| People affected | 9,358,891 (as reported by the organization) |
|---|---|
| Disclosed | Sep 9, 2015 |
| Discovered | Aug 5, 2015 |
| Attack | Hacking |
| Data exposed | NamesDates of birthSocial Security numbersAddressesFinancialInsuranceHealth |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | $5.1M HHS OCR HIPAA settlement (2021) (about $5.1M) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.