Health Plan of San Mateo
Disclosed Jan 18, 202311,894 affectedConfirmed
The covered entity (CE), Health Plan of San Mateo, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 11,894 individuals. The PHI involved included names, dates of birth, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 11,894 (as reported to HHS) |
|---|---|
| Disclosed | Jan 18, 2023 |
| Happened | Jan 17, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Health Plan of San Mateo
History of this record
2023-03-17 to 2023-01-18by backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 11894by backfillSource
empty to The covered entity (CE), Health Plan of San Mateo, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 11,894 individuals. The PHI involved included names, dates of bby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.