FEDERALHackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedIDENTITY_BASICHEALTH_BASICMedium
HUMANA INC.
bd_4bc4a8438dd9084a · schema v1 · pii pii-v1
Full breach record for HUMANA INC. →The covered entity (CE), Humana, reported that its business associate (BA) experienced a cyber-attack that affected the electronic protected health information (ePHI) of 5,569 individuals. The ePHI involved included names, diagnoses, conditions, health insurance and other treatment information. The CE notified HHS, affected individuals, and the media.
HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0bfdd4ee08dd9b9dHHS OCRfiled 2019-01-15(43d gap)Verified
- bd_13306157d13813b0HHS OCRfiled 2019-01-09(49d gap)Verified
- bd_ce09c0c29a2a7d98Montana State AGfiled 2019-01-03(55d gap)Candidate
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Feb 27, 2019
- Raw hash
- 4b2bec1bb551966bedd39361a9b1bc2aa8c899cd74497395b1e9f7c329673920
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
- Industry
- Insurance — Health
Victim entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
- Industry
- Insurance — Health
- Industry
- Healthcaresource default
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 5,569
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- Partner
- Regulator citations
- Notified HHS
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.