United Bankshares
Disclosed Aug 11, 20233 years ago8,801 affectedConfirmed
The business associate (BA), United Bankshares, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 8,801 individuals. The PHI involved included names, addresses, dates of birth, telephone numbers, Social Security numbers, driver's license numbers, diagnoses, lab results, medications, claims and financial information, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA installed manufacturer-provided software patches and implemented additional technical safeguards to better protect its sensitive data.
What is known
| People affected | 8,801 (as reported to HHS) |
|---|---|
| Disclosed | Aug 11, 2023 |
| Happened | May 30, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: United Banksharesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): United Bankshares (Business Associate, DC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 11, 2023 | 8,801 |
| Indiana AGresidents of IN | Aug 25, 2023 | 1 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 5385 to 8801 · backfill source
- 2026-09-25 · disclosed: 2023-08-25 to 2023-08-11 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), United Bankshares, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 8,801 individuals. The PHI involved included names, addresses, dates of birth, telephone · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.