Word & Brown Insurance Administrators
Disclosed Dec 23, 20241 year ago3,223 affectedConfirmed
The covered entity (CE), Word & Brown Insurance Administrators, Inc., reported that it experienced a cyberattack that affected the protected health information (PHI) of 3,223 individuals. The PHI involved included names, Social Security numbers, addresses, and dates of birth. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 3,223 (as reported to HHS) |
|---|---|
| Disclosed | Dec 23, 2024 |
| Happened | Oct 23, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Word & Brown Insurance Administratorsoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Word & Brown Insurance Administrators (Business Associate, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 23, 2024 | 3,223 |
| California AGresidents of CA | Mar 24, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 3223 · backfill source
- 2026-09-25 · disclosed: 2025-03-24 to 2024-12-23 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Word & Brown Insurance Administrators, Inc., reported that it experienced a cyberattack that affected the protected health information (PHI) of 3,223 individuals. The PHI involved included names, Social Security num · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.