Business Associate · Archived
Highmark Inc
36,600 individuals · submitted February 10, 2023
About this report
Highmark, the business associate (BA), reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of 36,600 individuals. The PHI involved included names, addresses, birthdates, Social Security and drivers’ license numbers, diagnoses, medications, claims and financial information, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the incident, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained on email security.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Highmark Inc
- State
- PA
- Entity type
- Business Associate
- Individuals affected
- 36,600
- Submission date
- February 10, 2023
- Breach type
- Hacking/IT Incident
- Location of information
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in PA
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals
PA · Oct 5, 2026
Franklin/Fulton Mental Health/Intellectual & Developmental Disabilities/Early Intervention
640 individuals
PA · Sep 9, 2026
Novocure Inc.
1,464 individuals
PA · Sep 4, 2026
Beaver County Behavioral Health
501 individuals
PA · Sep 4, 2026
COMHAR, Inc.
501 individuals
PA · Aug 31, 2026
The Foot and Ankle Wellness Center of Western Pennsylvania
653 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
MS · Oct 5, 2026
Hattiesburg Eye Clinic, P.A.
6,137 individuals