Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Harvard Pilgrim Health Care

Disclosed May 24, 20232,662,337 affectedConfirmed

Official notice

What is known

People affected2,662,337 (as reported to HHS)
DisclosedMay 24, 2023
DiscoveredApr 17, 2023
HappenedMar 28, 2023
AttackRansomware
Data exposedNamesHealthInsuranceCredentials and tokens
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Harvard Pilgrim Health Care
Official noticeoag.ca.gov
California Attorney General breach notice: ​​Harvard Pilgrim Health Care​
Official noticeatg.wa.gov
Washington Attorney General breach notice: Harvard Pilgrim Health Care
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: Harvard Pilgrim Health Care
Official noticeattorneygeneral.delaware.gov
Notice letter filed with the Delaware DOJ: Harvard Pilgrim Health Care
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Harvard Pilgrim Health Care
Official noticeago.vermont.gov
Vermont Attorney General: 2024-03-27 Harvard Pilgrim Health Care Data Breach Notice to Consumers
Official noticeago.vermont.gov
Vermont Attorney General: 2023-08-25 Harvard Pilgrim Health Care Data Breach Notice to Consumers
Official noticeago.vermont.gov
Vermont Attorney General: 2023-07-20 Harvard Pilgrim Health Care Data Breach Notice to Consumers
Official noticeago.vermont.gov
Vermont Attorney General: 2023-06-15 Harvard Pilgrim Health Care Data Breach Notice to Consumers
Official noticein.gov
Indiana Attorney General 2023 data breach report: Harvard Pilgrim Health Care
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Harvard Pilgrim Health Care (Health Plan, MA)

Notices filed

TotalMay 24, 2023
HHS archive2,662,337 people
Residents of WAJun 15, 2023
Washington AG8,358 people
Residents of DEJun 15, 2023
Delaware DOJCount not stated
Residents of ORJun 15, 2023
Oregon DOJ2,550,922 people
Residents of VTJun 15, 2023
Vermont AGCount not stated
Residents of INJun 15, 2023
Indiana AG3,652 people
Residents of CAJul 20, 2023
California AGCount not stated
Residents of VTJul 20, 2023
Vermont AGCount not stated
Residents of CAAug 25, 2023
California AGCount not stated
Residents of VTAug 25, 2023
Vermont AGCount not stated
Residents of CAFeb 15, 2024
California AGCount not stated
Residents of CAMar 27, 2024
California AGCount not stated
Residents of VTMar 27, 2024
Vermont AGCount not stated
Residents of CAOct 3, 2024
California AGCount not stated
Residents of DEOct 3, 2024
Delaware DOJCount not stated
Residents of CAJan 21, 2025
California AGCount not stated

Other breaches at Harvard Pilgrim Health Care

Hacking breachHacking exposed names and health records. Reported to the HHS OCR.1,168 affectedInsuranceUSJul 21Breach, details not statedBreach notice filed with the Vermont AG, details not stated.HealthcareUSJan 21, 2025Insider breachInsider exposed names and health records. Reported to the HHS archive.8,027 affectedHealthcareUSNov 20, 2020
History of this record
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
2550920 to 2662337by backfillSource
disclosed2026-09-25
2023-06-15 to 2023-05-24by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 2550920by backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2023-06-15-harvard-pilgrim-health-care-data-breach-notice-consumersby backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2023-07-20-harvard-pilgrim-health-care-data-breach-notice-consumersby backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2023-08-25-harvard-pilgrim-health-care-data-breach-notice-consumersby backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2024-03-27-harvard-pilgrim-health-care-data-breach-notice-consumersby backfillSource
data_types2026-09-25
[] to ["names","health","insurance","credentials"]by backfillSource
attack2026-09-25
unknown to ransomwareby backfillSource
disclosed2026-09-25
2023-07-20 to 2023-06-15by backfillSource
discovered2026-09-25
empty to 2023-04-17by backfillSource
disclosed2026-09-25
2023-08-25 to 2023-07-20by backfillSource
disclosed2026-09-25
2024-02-15 to 2023-08-25by backfillSource
disclosed2026-09-25
2024-03-27 to 2024-02-15by backfillSource
disclosed2026-09-25
2024-10-03 to 2024-03-27by backfillSource
disclosed2026-09-25
2025-01-21 to 2024-10-03by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Harvard Pilgrim Health Care