The covered entity (CE), Humana, reported that an unauthorized individual gained access to the protected health information (PHI) of 12,339 individuals using data it obtained elsewhere. The type of PHI affected included names, addresses, dates of birth, diagnoses, and other treatment information. The CE notified HHS and the affected individuals. In response to the breach, Humana implemented additional administrative and technical safeguards.
2026-09-25 · disclosed: 2023-09-22 to 2023-06-15 · backfill source
2026-09-25 · records: 12339 to 12539 · backfill source
2026-09-25 · data_types: ["names"] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 12339 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Humana, reported that an unauthorized individual gained access to the protected health information (PHI) of 12,339 individuals using data it obtained elsewhere. The type of PHI affected included names, addresses, da · backfill source
2026-09-25 · data_types: [] to ["names"] · backfill source
2026-09-25 · disclosed: 2023-12-13 to 2023-09-22 · backfill source
2026-09-25 · sector: other to finance · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2023-09-22 · backfill source
