Jefferson Health Plans
Disclosed May 18, 20264 months ago1,855 affectedConfirmed
The covered entity (CE), Jefferson Health Plans, reported that an employee of its business associate (BA) mailed the protected health information (PHI) of 1,855 individuals to the wrong recipients. The PHI involved demographic information. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 1,855 (as reported to HHS) |
|---|---|
| Disclosed | May 18, 2026 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Jefferson Health Plans (Health Plan, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 18 | 1,855 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.