Prominence Health Plan
Disclosed Jun 18, 20215 years ago45,380 affectedConfirmed
The covered entity (CE), Prominence Health Plan, reported that its business associate (BA) suffered a cyber-attack that affected the electronic protected health information (ePHI) of approximately 45,380 individuals. The ePHI involved included names, addresses, dates of birth, health insurance information, claim codes, and other treatment information. The CE notified HHS, affected individuals, and the media. The CE also provided affected individuals with a dedicated phone number for questions and concerns. In response to the breach, the BA strengthened its technical and security safeguards.
What is known
| People affected | 45,380 (as reported to HHS) |
|---|---|
| Disclosed | Jun 18, 2021 |
| Happened | Nov 30, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Prominence Health Planoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: Prominence Health Planin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Prominence Health Plan (Health Plan, NV)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 18, 2021 | |
| HHS archivetotal | Jun 18, 2021 | 45,380 |
| Indiana AGresidents of IN | Jun 21, 2021 | 3 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 45000 to 45380 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Prominence Health Plan, reported that its business associate (BA) suffered a cyber-attack that affected the electronic protected health information (ePHI) of approximately 45,380 individuals. The ePHI involved inclu · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 45000 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.