Elevance Health, Inc.

WellPoint Texas, Inc based in Indianapolis, Indiana, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-08-06 and reported on 2026-08-10. 101,047 Texas residents were affected. 1,500,000 individuals affected in total. Types of information involved: Name of individual;Address;Health Insurance Information;Other;Date of Birth.

Wellpoint based in Indianapolis, Indiana, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-02 and reported on 2026-06-30. 24 Texas residents were affected. 708 individuals affected in total. Types of information involved: Name of individual;Medical Information;Health Insurance Information;Other;Date of Birth.

Wellpoint Washington, Inc. reported a phishing incident affecting 12,017 Washington residents. The breach occurred June 24-July 2, 2025, involving unauthorized access to an email account via a phishing attack by business associate Clinics of Washington. Wellpoint discovered the incident on March 2, 2026. Exposed data included PHI, SSNs, DOBs, and driver's licenses. Remediation included credit monitoring services.

Wellpoint Washington, Inc. reported to HHS on 2026-05-20 a Hacking/IT Incident affecting 12020 individuals. Breached information located on Email. Business Associate Present: Yes.

Anthem, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-11-19. 1,162 Massachusetts residents were affected.

HHS OCR breach portal entry: Wellpoint, Inc. (Indiana, Business Associate) reported a Hacking/IT Incident affecting a Network Server, impacting 579 individuals. Submitted 2025-10-07. No narrative description provided in the portal row.

IEC Group, Inc. dba AmeriBen reported to HHS on 2023-08-24 a Unauthorized Access/Disclosure affecting 74,884 individuals. Breached information located on Email. An employee inadvertently sent an email containing PHI (names, financial info, treatment info) to patients. The covered entity notified HHS, affected individuals, and the media, and retrained the employee.

IEC Group Inc. (dba AmeriBen) reported an insider data mishandling incident in Washington. An employee attached a filtered Excel spreadsheet containing PHI and PII to an email. Recipients could potentially unfilter the file to view other members' data. 662 Washington residents were affected. The incident was discovered on July 5, 2023.

IEC GROUP INC D.B.A. AMERIBEN filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-582). The register records the breach as discovered on July 6, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Anthem Health Plans of Kentucky, acting as a business associate, reported a hacking/IT incident affecting a network server that compromised PHI of 537 individuals. PHI involved names, addresses, dates of birth, health insurance information, and claims information. HHS, affected individuals, and the media were notified. Additional administrative and technical safeguards were implemented as remediation. Submitted to the HHS OCR breach portal on 2022-09-29.