Breachesby GlyphHorizon Actuarial Services
Disclosed Mar 9, 2022227,953 affectedConfirmed
The business associate (BA), Horizon Actuarial Services, LLC, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 227,953 individuals. The PHI involved included names, dates of birth, Social Security numbers, claims and financial information, and diagnoses. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.
What is known
| People affected | 227,953 (as reported to HHS) |
|---|---|
| Disclosed | Mar 9, 2022 |
| Discovered | Nov 12, 2021 |
| Happened | Nov 10, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Horizon Actuarial ServicesWashington Attorney General breach notice: Horizon Actuarial ServicesOregon DOJ breach notice: Horizon Actuarial ServicesIndiana Attorney General 2022 data breach report: Horizon Actuarial ServicesHHS OCR breach report (archive, resolved): Horizon Actuarial Services (Business Associate, GA)
Notices filed
California AGCount not statedHHS archive227,953 peopleCalifornia AGCount not statedWashington AG53,256 peopleOregon DOJ194,195 peopleIndiana AG69,719 peopleCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not statedCalifornia AGCount not stated
History of this record
other to healthby backfillSource
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
194195 to 227953by backfillSource
empty to The business associate (BA), Horizon Actuarial Services, LLC, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 227,953 individuals. The PHI involved included names, dates of birth, by backfillSource
empty to organizationby backfillSource
empty to 194195by backfillSource
unknown to hackingby backfillSource
empty to 2021-11-12by backfillSource
2022-03-22 to 2022-03-09by backfillSource
2022-03-25 to 2022-03-22by backfillSource
2022-04-11 to 2022-03-25by backfillSource
2022-04-15 to 2022-04-11by backfillSource
2022-05-10 to 2022-04-15by backfillSource
2022-05-18 to 2022-05-10by backfillSource
2022-05-24 to 2022-05-18by backfillSource
2022-06-09 to 2022-05-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.