VOXX International
Disclosed Sep 28, 20205 years ago6,034 affectedConfirmed
The covered entity (CE), Voxx International Corporation, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 6,034 individuals. The ePHI involved included names, addresses, email addresses, dates of birth, Social Security numbers, financial information, and health insurance information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE strengthened it administrative, technical, and security safeguards to better protect its ePHI. OCR provided technical assistance to the CE regarding the Breach Notification Rule.
What is known
| People affected | 6,034 (as reported to HHS) |
|---|---|
| Disclosed | Sep 28, 2020 |
| Happened | Jun 4, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: VOXX Internationalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Voxx International (Health Plan, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Sep 28, 2020 | 666 |
| HHS archivetotal | Sep 28, 2020 | 6,034 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 6033 to 6034 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Voxx International Corporation, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 6,034 individuals. The ePHI involved included names, address · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.