REEF Global
Disclosed Dec 31, 20205 years ago31,143 affectedConfirmed
The covered entity (CE), REEF Global, Inc., reported that it suffered a ransomware attack that affected the electronic protected health information (ePHI) of 3,951 individuals. The ePHI involved included names, dates of birth, addresses, Social Security numbers, and health insurance information. The CE notified HHS, affected individuals, the media, and offered complimentary credit monitoring services. In response to the breach, the CE strengthened its administrative and technical safeguards to better protect its ePHI.
What is known
| People affected | 31,143 (as reported by the organization) |
|---|---|
| Disclosed | Dec 31, 2020 |
| Happened | Sep 30, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: REEF Globaloag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: REEF Globalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): REEF Global (Health Plan, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 31, 2020 | 3,951 |
| California AGresidents of CA | May 14, 2021 | |
| Indiana AGresidents of IN | May 14, 2021 | 56 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2021-05-14 to 2020-12-31 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), REEF Global, Inc., reported that it suffered a ransomware attack that affected the electronic protected health information (ePHI) of 3,951 individuals. The ePHI involved included names, dates of birth, addresses, So · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 31143 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.