Health Plan · Archived
CareFirst Administrators
14,538 individuals · submitted November 18, 2022
About this report
The covered entity (CE), CareFirst Administrators, reported that multiple employees of its business associate (BA) were the victims of an email phishing attack that affected the protected health information (PHI) of 14,538 individuals. The PHI involved included names, dates of births, addresses, Social Security numbers, diagnoses, medications, other treatment information, and claims information. The BA notified the affected individuals; the CE notified HHS, the media, and posted substitute notice on its website. In response to the breach the CE provided complimentary credit monitoring services to affected individuals while the BA implemented additional administrative and technical safeguards.
Summary as published by the HHS Office for Civil Rights.
- Organization
- CareFirst Administrators
- State
- MD
- Entity type
- Health Plan
- Individuals affected
- 14,538
- Submission date
- November 18, 2022
- Breach type
- Hacking/IT Incident
- Location of information
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals