Health Net
Disclosed Nov 18, 200916 years ago1,500,000 affectedUnverified
Missing portable drive held records of 1.5 million Health Net members
A portable disk drive with health information, Social Security numbers and bank account numbers disappeared from Health Net six months before disclosure, including all 446,000 Connecticut members; the Connecticut attorney general sued in the first state HIPAA enforcement action.
What is known
| People affected | 1,500,000 (as reported by the organization) |
|---|---|
| Disclosed | Nov 18, 2009 |
| Attack | Lost or stolen device |
| Data exposed | Health, Social Security numbers, Financial, Names |
| Sector | Insurance · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Privacy Rights Clearinghouse: Chronology of Data Breachesweb.archive.org · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Nov 18, 2009 | 1,500,000 |
Other breaches at Health Net
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Dec 22, 2021Dec 22, 20214 years ago | Dec 22, 20214 years ago | Not stated | Healthcare | Confirmed | Unknown |
| Disclosed May 13, 2019May 13, 20197 years agoInsider | May 13, 20197 years ago | Insider | Insurance | Confirmed | 2,404 |
| Disclosed Jul 2, 2013Jul 2, 201313 years ago | Jul 2, 201313 years ago | Not stated | Healthcare | Confirmed | 8,331 |
| Server drives missing from IBM-managed data center hold data of 1.9 millionApr 14, 201115 years agoLost or stolen device | Apr 14, 201115 years ago | Lost or stolen device | Insurance | Confirmed | 1.9M |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.