Elevance Health, Inc.

Wellpoint based in Indianapolis, Indiana, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-02 and reported on 2026-06-30. 24 Texas residents were affected. 708 individuals affected in total. Types of information involved: Name of individual;Medical Information;Health Insurance Information;Other;Date of Birth.

WellPoint, a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2026-03-02 and filed notice on 2026-06-02. 12,017 Washington residents were affected. 92 days elapsed between awareness and notification. 251 days to identify the breach. 0 days to contain the breach.

Wellpoint Washington, Inc. reported to HHS on 2026-05-20 a Hacking/IT Incident affecting 12020 individuals. Breached information located on Email. Business Associate Present: Yes.

HHS OCR breach portal entry: Wellpoint, Inc. (Indiana, Business Associate) reported a Hacking/IT Incident affecting a Network Server, impacting 579 individuals. Submitted 2025-10-07. No narrative description provided in the portal row.

IEC Group, Inc. dba AmeriBen reported to HHS on 2023-08-24 a Unauthorized Access/Disclosure affecting 74,884 individuals. Breached information located on Email. An employee inadvertently sent an email containing PHI (names, financial info, treatment info) to patients. The covered entity notified HHS, affected individuals, and the media, and retrained the employee.

IEC Group Inc., dba AmeriBen, a health sector entity reported a theft or mistake incident to the Washington Attorney General. The organization became aware of the incident on 2023-07-05 and filed notice on 2023-08-10. 662 Washington residents were affected. 36 days elapsed between awareness and notification. 729 days to identify the breach. 0 days to contain the breach.

Anthem Health Plans of Kentucky, acting as a business associate, reported a hacking/IT incident affecting a network server that compromised PHI of 537 individuals. PHI involved names, addresses, dates of birth, health insurance information, and claims information. HHS, affected individuals, and the media were notified. Additional administrative and technical safeguards were implemented as remediation. Submitted to the HHS OCR breach portal on 2022-09-29.

Anthem Health Plans of New Hampshire, Inc. (a subsidiary of Elevance Health) notified the NH Attorney General of a ransomware attack on its vendor, RRD. The incident occurred between Nov 29 and Dec 23, 2021. The attack impacted PHI and PII of 26 individuals (1 NH resident). Notifications were sent on Sept 27, 2022.

Anthem, Inc. notified the California Attorney General of a data security incident involving its vendor, OneDigital. Unauthorized access to OneDigital's system occurred between January 12 and January 21, 2021, and was discovered on November 24, 2021. Affected data may include names, addresses, dates of birth, SSNs, driver's license numbers, and protected health information (PHI) such as medical records and claims data. Anthem is offering one year of credit monitoring to affected individuals.

BioPlus Specialty Pharmacy Services, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2021-12-10. The breach occurred from 10/25/2021 to 11/11/2021. 534 Montana residents were affected.