Breachesby GlyphHumana
Disclosed Dec 31, 20185,569 affectedConfirmed
The covered entity (CE), Humana, Inc., reported that an employee emailed the electronic protected health information (ePHI) of 756 individuals to his personal email account. The ePHI involved included names, addresses, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE retrained its staff to better protect ePHI. OCR provided the CE with technical assistance regarding the HIPAA Breach Notification Rule.
What is known
| People affected | 5,569 (as reported to HHS) |
|---|---|
| Disclosed | Dec 31, 2018 |
| Discovered | Sep 19, 2019 |
| Happened | Aug 27, 2019 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Humana
Breach, details not statedBreach notice filed with the Indiana AG, details not stated.10 affectedFinanceUSOct 22Breach, details not statedExposed Social Security numbers, health records, insurance details, dates of birth, addresses and names. Reported to the Indiana AG.16K affectedInsuranceUSApr 29, 2025Hacking breachHacking exposed names and health records. Reported to the California AG.13K affectedFinanceUSJun 15, 2023Hacking breachHacking exposed names and health records. Reported to the California AG.23K affectedHealthcareUSSep 9, 2021Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the California AG.65K affectedHealthcareUSAug 19, 2020Insider breachInsider exposed names, health records, biometric data and Social Security numbers. Reported to the California AG.6,836 affectedFinanceUSNov 21, 2017Breach, details not statedBreach notice filed with the Indiana AG, details not stated.FinanceUSMay 23, 2014
History of this record
2019-01-09 to 2018-12-31by backfillSource
2019-01-15 to 2019-01-09by backfillSource
2019-02-27 to 2019-01-15by backfillSource
organization to hhsby backfillSource
1855 to 5569by backfillSource
2019-06-03 to 2019-02-27by backfillSource
2019-10-02 to 2019-06-03by backfillSource
unknown to insiderby backfillSource
["names"] to ["names","health"]by backfillSource
2019-10-23 to 2019-10-02by backfillSource
empty to The covered entity (CE), Humana, Inc., reported that an employee emailed the electronic protected health information (ePHI) of 756 individuals to his personal email account. The ePHI involved included names, addresses, and health insurance by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.