Optum360, LLC (covered entity, MN) reported to HHS OCR on 2019-07-01 that its business associate suffered a cyber-attack (Hacking/IT Incident, Network Server) affecting ePHI of 11,574,452 individuals. Data involved: names, addresses, phone numbers, DOBs, SSNs, financial information, and treatment information. CE notified HHS, affected individuals, the media, and posted substitute web notice; subsequently terminated the BA relationship. Note: portal headline count is 11,500,000 but narrative states 11,574,452 — narrative figure used.
Affected (this filing): 11,574,452