Selected Benefits
Disclosed Aug 12, 20206 years ago8,100 affectedConfirmed
The business associate (BA), Selected Benefits, reported that its email hosting service provider experienced a cyber-attack that compromised the protected health information (PHI) of 8,100 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, and clinical and financial information. The BA notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the email hosting service provider implemented additional technical safeguards to better protect PHI.
What is known
| People affected | 8,100 (as reported to HHS) |
|---|---|
| Disclosed | Aug 12, 2020 |
| Happened | Jun 15, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: Selected Benefitsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Selected Benefits (Business Associate, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Aug 12, 2020 | 1 |
| HHS archivetotal | Aug 14, 2020 | 8,100 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 8000 to 8100 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Selected Benefits, reported that its email hosting service provider experienced a cyber-attack that compromised the protected health information (PHI) of 8,100 individuals. The PHI involved included names, dates · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.