Breachesby GlyphHighmark
Disclosed Mar 29, 20246,205 affectedConfirmed
Highmark, the covered entity (CE), reported that an employee mailed the protected health information (PHI) of 6,205 individuals to outdated addresses. The PHI involved included names, addresses, dates of birth, member identification number, diagnoses, medications, and other treatment and financial information. The CE notified HHS, impacted individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data. Staff were retrained.
What is known
| People affected | 6,205 (as reported to HHS) |
|---|---|
| Disclosed | Mar 29, 2024 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Highmark
Phishing breachPhishing exposed names, health records and insurance details. Reported to the California AG.1.1M affectedHealthcareUSMar 11, 2022Breach, details not statedBreach notice filed with the California AG, details not stated.5,921 affectedHealthcareUSJun 24, 2021Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.2,589 affectedHealthcareUSJul 8, 2014
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.