The covered entity (CE), Humana, Inc., reported that an employee emailed the electronic protected health information (ePHI) of 756 individuals to his personal email account. The ePHI involved included names, addresses, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE retrained its staff to better protect ePHI. OCR provided the CE with technical assistance regarding the HIPAA Breach Notification Rule.
2026-09-25 · disclosed: 2019-01-09 to 2018-12-31 · backfill source
2026-09-25 · disclosed: 2019-01-15 to 2019-01-09 · backfill source
2026-09-25 · disclosed: 2019-02-27 to 2019-01-15 · backfill source
2026-09-25 · records_basis: organization to hhs · backfill source
2026-09-25 · records: 1855 to 5569 · backfill source
2026-09-25 · disclosed: 2019-06-03 to 2019-02-27 · backfill source
2026-09-25 · disclosed: 2019-10-02 to 2019-06-03 · backfill source
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: ["names"] to ["names","health"] · backfill source
2026-09-25 · disclosed: 2019-10-23 to 2019-10-02 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Humana, Inc., reported that an employee emailed the electronic protected health information (ePHI) of 756 individuals to his personal email account. The ePHI involved included names, addresses, and health insurance · backfill source
