KAISER FOUNDATION HEALTH PLAN, INC.

Kaiser Foundation Health Plan, Inc. (CA) reported to HHS on 2024-04-12 an Unauthorized Access/Disclosure affecting up to 13,400,000 individuals. The CE disclosed PHI — including clinical, demographic, and financial information — while using third-party tracking technologies embedded in its authenticated online platforms. Location of breached information: Network Server. In response, Kaiser removed all third-party tracking technologies, retrained workforce members, and implemented additional administrative safeguards. The CE notified HHS, affected individuals, and the media.

Affected (this filing): 13,400,000

Kaiser Permanente disclosed that cookies/pixels on its websites and apps may have transmitted member personal information (IP address, name, account status, navigation data, search terms) to third-party vendors Google, Microsoft Bing, and X (Twitter). Credentials, SSNs, and financial data were not involved. The technologies were removed following an internal investigation.

Kaiser Foundation Health Plan, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-04-12. 13,400,000 individuals were affected.

Affected (this filing): 13,400,000