Breachesby GlyphWebTPA Employer Services
Disclosed May 8, 20242,518,533 affectedConfirmed
Health plan administrator WebTPA breach affects almost 2.5 million people
WebTPA said it detected suspicious activity on December 28, 2023 and found an unauthorized actor may have obtained personal information between April 18 and 23, 2023; TechCrunch reported almost 2.5 million people were affected, some with Social Security numbers.
What is known
| People affected | 2,518,533 (as reported to HHS) |
|---|---|
| Disclosed | May 8, 2024 |
| Discovered | Dec 28, 2023 |
| Happened | Apr 18, 2023 |
| Attack | Hacking |
| Data exposed | NamesSocial Security numbersHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: WebTPA Employer ServicesCalifornia AG: WebTPA Employer Services breach noticeHealthcare company WebTPA discloses breach affecting 2.5 million peopleIndiana Attorney General 2024 data breach report: WebTPA Employer ServicesHHS OCR breach report (archive, resolved): WebTPA Employer Services (Business Associate, TX)
Notices filed
History of this record
["names","ssn"] to ["names","ssn","health"]by backfillSource
organization to hhsby backfillSource
2429175 to 2518533by backfillSource
empty to organizationby backfillSource
empty to 2429175by backfillSource
other to insuranceby seedSource
unknown to hackingby seedSource
[] to ["names","ssn"]by seedSource
empty to 2023-12-28by seedSource
empty to WebTPA said it detected suspicious activity on December 28, 2023 and found an unauthorized actor may have obtained personal information between April 18 and 23, 2023; TechCrunch reported almost 2.5 million people were affected, some with Soby seedSource
empty to Health plan administrator WebTPA breach affects almost 2.5 million peopleby seedSource
2024-07-19 to 2024-05-08by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.