Every public data breach

44 disclosed this week · 26,355 on record

UnitedHealth Group health plan single affiliated covered entity

Disclosed May 8, 201920,536 affectedConfirmed

Official notice

The covered entity (CE), UnitedHealth Group Health Plan Single Affiliated Covered Entity, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 3,335 individuals. The PHI involved included names, treatment information, and claims and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services and the CE and BA implemented additional administrative and technical safeguards.

What is known

People affected20,536 (as reported to HHS)
DisclosedMay 8, 2019
AttackHacking
Data exposedNamesHealth
SectorInsurance · US
StatusConfirmed

Sources

Notices filed

Other breaches at UnitedHealth Group health plan single affiliated covered entity

History of this record
records2026-09-25
3335 to 20536by backfillSource
disclosed2026-09-25
2020-01-22 to 2019-05-08by backfillSource
disclosed2026-09-25
2020-02-04 to 2020-01-22by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about UnitedHealth Group health plan single affiliated covered entity