Breachesby GlyphHealth Care Service
Disclosed Aug 21, 2023220,913 affectedConfirmed
The covered entity (CE), Health Care Service Corporation, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 220,913 individuals. The PHI involved included names, addresses, email addresses, phone numbers, dates of birth, Social Security numbers, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, and the media. OCR provided technical assistance regarding the HIPAA Privacy Rule.
What is known
| People affected | 220,913 (as reported to HHS) |
|---|---|
| Disclosed | Aug 21, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Health Care Service
Insider breachInsider exposed names and health records. Reported to the HHS archive.2,944 affectedInsuranceUSApr 13, 2025Hacking breachHacking exposed names and health records. Reported to the HHS archive.543 affectedInsuranceUSJun 15, 2021Insider breachInsider exposed names and health records. Reported to the HHS archive.1,182 affectedHealthcareUSApr 24, 2019Breach, details not statedBreach notice filed with the Indiana AG, details not stated.161 affectedHealthcareUSJun 4, 2018Lost or stolen device breachLost or stolen device exposed names, Social Security numbers, insurance details, financial details, emails, phone numbers, addresses and names. Reported to the HHS archive.501 affectedHealthcareUSMar 27, 2015Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.501 affectedInsuranceUSOct 26, 2012Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.501 affectedInsuranceUSJul 28, 2011
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.