NEW YORKHHS OCRFirst filing
Filed Sep 9, 2015bd_051bfda780c70faf
Excellus Health Plan, Inc. reported to HHS on 2015-09-09 a Hacking/IT Incident affecting 9358891 individuals. Breached information located on Network Server. Hackers gained unauthorized access between Dec 23, 2013 and May 11, 2015, installing malware and exfiltrating PHI, SSNs, and financial data. The plan settled with OCR for $5.1 million and implemented a corrective action plan with two years of monitoring.
Affected (this filing): 9,358,891
HIPAA 60-day late · 625dHHS notified · 625d