Breachesby GlyphShutterfly
Disclosed Dec 18, 202152,777 affectedConfirmed
The business associate (BA), Shutterfly, LLC, reported that an employee mailed the protected health information (PHI) of 2,641 individuals to the wrong recipients. The PHI involved included names, addresses, diagnoses, health insurance information, and claims and other treatment information. The BA notified HHS and the affected individuals. In response to the breach, the BA implemented additional technical safeguards, revised its policies and procedures, and retrained its employees.
What is known
| People affected | 52,777 (as reported by the organization) |
|---|---|
| Disclosed | Dec 18, 2021 |
| Discovered | Dec 13, 2021 |
| Happened | Dec 3, 2021 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Shutterfly
History of this record
other to healthby backfillSource
[] to ["names","health"]by backfillSource
empty to The business associate (BA), Shutterfly, LLC, reported that an employee mailed the protected health information (PHI) of 2,641 individuals to the wrong recipients. The PHI involved included names, addresses, diagnoses, health insurance infoby backfillSource
empty to organizationby backfillSource
empty to 52777by backfillSource
2022-03-23 to 2021-12-18by backfillSource
unknown to ransomwareby backfillSource
empty to 2021-12-13by backfillSource
2022-06-02 to 2022-03-23by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.