Health Care Service
Disclosed Apr 13, 20252,944 affectedConfirmed
The covered entity (CE), Health Care Service Corporation, reported that it experienced a hacking incident that compromised the protected health information (PHI) of 2,944 individuals. The CE provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its websites. In response to the breach, the CE implemented a variety of new safeguards on member account registration, and a series of technical improvements to detect and block suspicious activity in the member portal.
What is known
| People affected | 2,944 (as reported to HHS) |
|---|---|
| Disclosed | Apr 13, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Health Care Service
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.