Skip to content
Breaches.

Harvard Pilgrim Health Care

Disclosed May 24, 20233 years ago2,662,337 affectedConfirmed

Official notice

What is known

People affected2,662,337 (as reported to HHS)
DisclosedMay 24, 2023
DiscoveredApr 17, 2023
HappenedMar 28, 2023
AttackRansomware
Data exposedNames, Health, Insurance, Credentials and tokens
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Harvard Pilgrim Health Careoag.ca.gov · Official notice
California Attorney General breach notice: ​​Harvard Pilgrim Health Care​oag.ca.gov · Official notice
Washington Attorney General breach notice: Harvard Pilgrim Health Careatg.wa.gov · Official notice
Notice letter filed with the Delaware DOJ: Harvard Pilgrim Health Careattorneygeneral.delaware.gov · Official notice
Notice letter filed with the Delaware DOJ: Harvard Pilgrim Health Careattorneygeneral.delaware.gov · Official notice
Oregon DOJ breach notice: Harvard Pilgrim Health Carejustice.oregon.gov · Official notice
Vermont Attorney General: 2024-03-27 Harvard Pilgrim Health Care Data Breach Notice to Consumersago.vermont.gov · Official notice
Vermont Attorney General: 2023-08-25 Harvard Pilgrim Health Care Data Breach Notice to Consumersago.vermont.gov · Official notice
Vermont Attorney General: 2023-07-20 Harvard Pilgrim Health Care Data Breach Notice to Consumersago.vermont.gov · Official notice
Vermont Attorney General: 2023-06-15 Harvard Pilgrim Health Care Data Breach Notice to Consumersago.vermont.gov · Official notice
Indiana Attorney General 2023 data breach report: Harvard Pilgrim Health Carein.gov · Official notice
HHS OCR breach report (archive, resolved): Harvard Pilgrim Health Care (Health Plan, MA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalMay 24, 20232,662,337
Washington AGresidents of WAJun 15, 20238,358
Delaware DOJresidents of DEJun 15, 2023
Oregon DOJresidents of ORJun 15, 20232,550,922
Vermont AGresidents of VTJun 15, 2023
Indiana AGresidents of INJun 15, 20233,652
California AGresidents of CAJul 20, 2023
Vermont AGresidents of VTJul 20, 2023
California AGresidents of CAAug 25, 2023
Vermont AGresidents of VTAug 25, 2023
California AGresidents of CAFeb 15, 2024
California AGresidents of CAMar 27, 2024
Vermont AGresidents of VTMar 27, 2024
California AGresidents of CAOct 3, 2024
Delaware DOJresidents of DEOct 3, 2024
California AGresidents of CAJan 21, 2025

Other breaches at Harvard Pilgrim Health Care

BreachAffected
Disclosed Jan 21, 2025Jan 21, 20251 year agoUnknown
Disclosed Nov 20, 2020Nov 20, 20205 years agoInsider8,027
History of this record
  • 2026-09-25 · records_basis: organization to hhs · backfill source
  • 2026-09-25 · records: 2550920 to 2662337 · backfill source
  • 2026-09-25 · disclosed: 2023-06-15 to 2023-05-24 · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 2550920 · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-06-15-harvard-pilgrim-health-care-data-breach-notice-consumers · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-07-20-harvard-pilgrim-health-care-data-breach-notice-consumers · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-08-25-harvard-pilgrim-health-care-data-breach-notice-consumers · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-03-27-harvard-pilgrim-health-care-data-breach-notice-consumers · backfill source
  • 2026-09-25 · data_types: [] to ["names","health","insurance","credentials"] · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · disclosed: 2023-07-20 to 2023-06-15 · backfill source
  • 2026-09-25 · discovered: empty to 2023-04-17 · backfill source
  • 2026-09-25 · disclosed: 2023-08-25 to 2023-07-20 · backfill source
  • 2026-09-25 · disclosed: 2024-02-15 to 2023-08-25 · backfill source
  • 2026-09-25 · disclosed: 2024-03-27 to 2024-02-15 · backfill source
  • 2026-09-25 · disclosed: 2024-10-03 to 2024-03-27 · backfill source
  • 2026-09-25 · disclosed: 2025-01-21 to 2024-10-03 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Harvard Pilgrim Health Care

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.