Trillium Community Health Plan data breach (2021)

Breach window

Jan 7, 2021 → Jan 25, 2021

When the intrusion reportedly occurred, per the linked filings

Breach discoveredAG web form

Jan 25, 2021

Reported by OREGON AG filing

37 days

OREGONHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Mar 3, 2021bd_e4a6d959819c198d

Trillium Community Health Plan (OR) reported to HHS on 2021-03-03 a Hacking/IT Incident affecting 87,761 individuals. The breach occurred at a business associate that experienced a cyber-attack impacting ePHI including names, addresses, dates of birth, health insurance information, diagnoses, medications prescribed, and other treatment information, stored on a Network Server. The CE notified HHS, affected individuals, and the media, provided substitute notice, offered complimentary identity protection services, and terminated its contract with the business associate.

Affected (this filing):

🦫Oregon State AGMost recentlinked via same-victim cross-source · 100%

Filed Mar 4, 2021bd_59d02834ca2610db

Trillium Community Health Plan reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-04. The breach occurred during 1/7/2021 - 1/25/2021. The breach was discovered on 1/25/2021. 2,181 individuals were affected. Notice was sent on 2/26/2021.

Affected (this filing): 2,181

Trillium Community Health Plan

Litigation Timing

Sensitive data

Timeline