norm: excellus health planUSLEI 254900XW4TFFU135LI22 · no CIKMax severity: Critical

Canonical registry

EXCELLUS HEALTH PLAN, INC.

ent_019fa533f400d88111da4e4b1844c436

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

9,358,891

nationwide · HHS OCR NY

Leak-site claims

0

none in sample

Identity resolution

Canonical name: EXCELLUS HEALTH PLAN, INC.
Normalized: excellus health plan— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 254900XW4TFFU135LI22
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

NEW YORKHHS OCRas victim2015-09-09
Excellus Health Plan, Inc. reported to HHS on 2015-09-09 a Hacking/IT Incident affecting 9358891 individuals. Breached information located on Network Server. Hackers gained unauthorized access between Dec 23, 2013 and May 11, 2015, installing malware and exfiltrating PHI, SSNs, and financial data. The plan settled with OCR for $5.1 million and implemented a corrective action plan with two years of monitoring.