The covered entity (CE), Humana, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 1,823 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses and medical conditions, medications prescribed, and other treatment information. The CE notified HHS and the BA notified affected individuals, the media, and provided complimentary credit monitoring services. OCR provided the CE with technical assistance regarding the HIPAA Breach Notification Rule.
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Humana, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 1,823 individuals. The ePHI involved included names, addresses, d · backfill source
2026-09-25 · disclosed: 2021-12-06 to 2021-09-09 · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 22767 · backfill source
2026-09-25 · sector: other to health · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2022-08-05 · backfill source
2026-09-25 · disclosed: 2022-09-21 to 2021-12-06 · backfill source
