FEDERALHHS OCRFirst filing
Filed Apr 18, 2017bd_da74e00411691a60
Humana Inc (Health Plan, KY) reported to HHS OCR on 2017-04-18 a Hacking/IT Incident affecting 3,831 individuals. Servers were compromised by a cyber-attack involving automated credential-stuffing/brute-force attempts from both foreign and domestic IP addresses. PHI exposed included names, dates of birth, claims information, medications prescribed, other treatment information, and health diagnoses/conditions. Remediation included IP blocking, password resets, CAPTCHA, bot managers, and MFA. Breached information located on Network Server. Case # HU17001CC.
Affected (this filing): 3,831
HHS notified