Virginia Department of Medical Assistance Services
Disclosed Jan 31, 20206 years ago6,120 affectedConfirmed
Virginia Department of Medical Assistance Services, the covered entity (CE), reported that several employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 6,120 individuals. The ePHI involved included names, Medicaid identification numbers, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to prevent similar incidents.
What is known
| People affected | 6,120 (as reported to HHS) |
|---|---|
| Disclosed | Jan 31, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Virginia Department of Medical Assistance Services (Health Plan, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 31, 2020 | 6,120 |
Other breaches at Virginia Department of Medical Assistance Services
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Aug 9, 2023Aug 9, 20233 years agoHacking | Aug 9, 20233 years ago | Hacking | Insurance | Confirmed | 1.2M |
| Disclosed Mar 12, 2015Mar 12, 201511 years agoHacking | Mar 12, 201511 years ago | Hacking | Insurance | Confirmed | 698K |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.
Everything about Virginia Department of Medical Assistance Services