Aetna ACE (Welltok, Inc.)

Aetna ACE (Health Plan, CT) reported to HHS on 2024-12-20 an Unauthorized Access/Disclosure affecting 1,317 individuals. A business associate employee mailed PHI — including names, addresses, and medications — to wrong recipients. Breached information was located on Other Portable Electronic Device. The CE notified HHS and affected individuals; the BA implemented additional administrative and technical safeguards in response.

Aetna ACE (CT, Health Plan) reported to HHS on 2024-05-03 a Hacking/IT Incident affecting 9,191 individuals. A vendor of its business associate experienced a cyber-attack that compromised PHI including names, addresses/zip codes, birthdates, and other identifiers. Breached information was located on a Network Server. HHS and affected individuals were notified.

Aetna ACE (Welltok, Inc.), a finance sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2023-10-06 and filed notice on 2024-02-28. 2,653 Washington residents were affected. 145 days elapsed between awareness and notification. 129 days to identify the breach.

Aetna ACE (Health Plan, CT) reported to HHS on 2022-07-27 a Hacking/IT Incident affecting 325,278 individuals. A vendor of Aetna's business associate experienced a ransomware attack that compromised PHI stored on network servers. Exposed data included names, dates of birth, addresses, health insurance information, lab results, medication information, and financial and claims information. The CE notified HHS, affected individuals, and the media.