Horizon Actuarial Services
Disclosed Mar 9, 20224 years ago227,953 affectedConfirmed
The business associate (BA), Horizon Actuarial Services, LLC, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 227,953 individuals. The PHI involved included names, dates of birth, Social Security numbers, claims and financial information, and diagnoses. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.
What is known
| People affected | 227,953 (as reported to HHS) |
|---|---|
| Disclosed | Mar 9, 2022 |
| Discovered | Nov 12, 2021 |
| Happened | Nov 10, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Horizon Actuarial Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Horizon Actuarial Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Horizon Actuarial Servicesjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Horizon Actuarial Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Horizon Actuarial Services (Business Associate, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 9, 2022 | |
| HHS archivetotal | Mar 9, 2022 | 227,953 |
| California AGresidents of CA | Mar 22, 2022 | |
| Washington AGresidents of WA | Mar 22, 2022 | 53,256 |
| Oregon DOJresidents of OR | Mar 22, 2022 | 194,195 |
| Indiana AGresidents of IN | Mar 22, 2022 | 69,719 |
| California AGresidents of CA | Mar 25, 2022 | |
| California AGresidents of CA | Apr 11, 2022 | |
| California AGresidents of CA | Apr 15, 2022 | |
| California AGresidents of CA | May 10, 2022 | |
| California AGresidents of CA | May 18, 2022 | |
| California AGresidents of CA | May 24, 2022 | |
| California AGresidents of CA | Jun 9, 2022 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 194195 to 227953 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Horizon Actuarial Services, LLC, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 227,953 individuals. The PHI involved included names, dates of birth, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 194195 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2021-11-12 · backfill source
- 2026-09-25 · disclosed: 2022-03-22 to 2022-03-09 · backfill source
- 2026-09-25 · disclosed: 2022-03-25 to 2022-03-22 · backfill source
- 2026-09-25 · disclosed: 2022-04-11 to 2022-03-25 · backfill source
- 2026-09-25 · disclosed: 2022-04-15 to 2022-04-11 · backfill source
- 2026-09-25 · disclosed: 2022-05-10 to 2022-04-15 · backfill source
- 2026-09-25 · disclosed: 2022-05-18 to 2022-05-10 · backfill source
- 2026-09-25 · disclosed: 2022-05-24 to 2022-05-18 · backfill source
- 2026-09-25 · disclosed: 2022-06-09 to 2022-05-24 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.