Nonstop Administration and Insurance Services
Disclosed Feb 15, 20233 years ago10,504 affectedConfirmed
Nonstop Administration and Insurance Services, the business associate (BA), reported that it experienced a cyber-attack that affected the protected health information (PHI) of 10,504 individuals. The PHI involved included names, gender, addresses, email addresses, phone numbers, dates of birth, Social Security numbers, diagnoses, claims and financial information, and health insurance and treatment information. The BA notified HHS, and the BA and CE notified the affected individuals. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect sensitive data.
What is known
| People affected | 10,504 (as reported to HHS) |
|---|---|
| Disclosed | Feb 15, 2023 |
| Happened | Dec 22, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Nonstop Administration and Insurance Servicesoag.ca.gov · Official notice | Official notice |
| California Attorney General breach notice: Nonstop Administration and insurance Servicesoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Nonstop Administration & Insurance Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Nonstop Administration and Insurance Services (Business Associate, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 15, 2023 | 10 |
| Indiana AGresidents of IN | Feb 22, 2023 | 1 |
| Indiana AGresidents of IN | Mar 24, 2023 | 1 |
| HHS archivetotal | Mar 27, 2023 | 10,504 |
| California AGresidents of CA | May 26, 2023 | |
| California AGresidents of CA | Nov 27, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 796 to 10504 · backfill source
- 2026-09-25 · summary: empty to Nonstop Administration and Insurance Services, the business associate (BA), reported that it experienced a cyber-attack that affected the protected health information (PHI) of 10,504 individuals. The PHI involved included names, gender, add · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 796 · backfill source
- 2026-09-25 · disclosed: 2023-05-26 to 2023-02-15 · backfill source
- 2026-09-25 · disclosed: 2023-11-27 to 2023-05-26 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.
Everything about Nonstop Administration and Insurance Services