Health Data Breach Tracker/VA

Health Plan · Archived

Defense Health Agency (TriWest)

11,844 individuals · submitted May 21, 2026

About this report

The covered entity (CE), Defense Health Agency, reported that several employees were the targets of an email phishing scheme that affected the protected health information (PHI) of approximately 11,844 individuals. The PHI involved names, addresses, dates of birth, other identifiers, claims information, diagnoses/conditions, and other treatment information. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.

Summary as published by the HHS Office for Civil Rights.

Organization
Defense Health Agency (TriWest)
State
VA
Entity type
Health Plan
Individuals affected
11,844
Submission date
May 21, 2026
Breach type
Hacking/IT Incident
Location of information
Network Server
Business associate present
Yes
OCR status
Archived

More breach reports in VA

More Hacking/IT Incident reports