Insulet
Disclosed Mar 19, 20219,050 affectedConfirmed
The covered entity (CE), Insulet Corporation, reported that its business associate (BA) was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 9,050 individuals. The ePHI involved included names, addresses, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA retrained its staff on recognizing and responding to fraudulent email communications.
What is known
| People affected | 9,050 (as reported to HHS) |
|---|---|
| Disclosed | Mar 19, 2021 |
| Happened | Jan 13, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Insulet
Insider breachInsider exposed names and health records. Reported to the HHS OCR.841 affectedHealthcareUSMay 16, 2025Insider breachInsider exposed names and health records. Reported to the California AG.29K affectedHealthcareUSJan 5, 2023Insider breachInsider exposed names and health records. Reported to the HHS archive.1,469 affectedHealthcareUSOct 17, 2017
History of this record
other to healthby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 9050by backfillSource
empty to The covered entity (CE), Insulet Corporation, reported that its business associate (BA) was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 9,050 individuals. The ePHI involved included namesby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.