The covered entity (CE), Providence Health Plan, reported that a temporary contract worker sent emails containing the electronic protected health information (ePHI) of 5,509 individuals to a personal email address. The ePHI involved included names, Social Security numbers, identification numbers, dates of birth, and treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE revised its procedures, retrained its workforce members, and implemented additional technical safeguards.
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 5509 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Providence Health Plan, reported that a temporary contract worker sent emails containing the electronic protected health information (ePHI) of 5,509 individuals to a personal email address. The ePHI involved include · backfill source
