Skip to content

UnitedHealth Group health plan single affiliated covered entity

Disclosed May 8, 20197 years ago20,536 affectedConfirmed

Official notice

The covered entity (CE), UnitedHealth Group Health Plan Single Affiliated Covered Entity, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 3,335 individuals. The PHI involved included names, treatment information, and claims and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services and the CE and BA implemented additional administrative and technical safeguards.

What is known

People affected20,536 (as reported to HHS)
DisclosedMay 8, 2019
AttackHacking
Data exposedNames, Health
SectorInsurance · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalMay 8, 201920,536
HHS archivetotalJan 22, 2020934
HHS archivetotalFeb 4, 20203,335

Other breaches at UnitedHealth Group health plan single affiliated covered entity

BreachAffected
Disclosed Apr 27, 2010Apr 27, 201016 years agoInsider19K
History of this record
  • 2026-09-25 · records: 3335 to 20536 · backfill source
  • 2026-09-25 · disclosed: 2020-01-22 to 2019-05-08 · backfill source
  • 2026-09-25 · disclosed: 2020-02-04 to 2020-01-22 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about UnitedHealth Group health plan single affiliated covered entity

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.