Skip to content

Insulet

Disclosed Mar 19, 20215 years ago9,050 affectedConfirmed

Official notice

The covered entity (CE), Insulet Corporation, reported that its business associate (BA) was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 9,050 individuals. The ePHI involved included names, addresses, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA retrained its staff on recognizing and responding to fraudulent email communications.

What is known

People affected9,050 (as reported to HHS)
DisclosedMar 19, 2021
HappenedJan 13, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Insuletoag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): Insulet (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAMar 19, 2021
HHS archivetotalMar 19, 20219,050

Other breaches at Insulet

BreachAffected
Disclosed May 16, 2025May 16, 20251 year agoInsider841
Disclosed Jan 5, 2023Jan 5, 20233 years agoInsider29K
Disclosed Oct 17, 2017Oct 17, 20178 years agoInsider1,469
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 9050 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Insulet Corporation, reported that its business associate (BA) was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 9,050 individuals. The ePHI involved included names · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Insulet

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.