Every public data breach

47 disclosed this week · 26,367 on record

Health Plan of San Mateo

Disclosed Jan 18, 202311,894 affectedConfirmed

Official notice

The covered entity (CE), Health Plan of San Mateo, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 11,894 individuals. The PHI involved included names, dates of birth, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.

What is known

People affected11,894 (as reported to HHS)
DisclosedJan 18, 2023
HappenedJan 17, 2023
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

Other breaches at Health Plan of San Mateo

History of this record
disclosed2026-09-25
2023-03-17 to 2023-01-18by backfillSource
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 11894by backfillSource
summary2026-09-25
empty to The covered entity (CE), Health Plan of San Mateo, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 11,894 individuals. The PHI involved included names, dates of bby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Health Plan of San Mateo