Benefit Plan Administrators, Inc.

Benefit Plan Administrators, Inc. reported to HHS on 2022-06-27 a Hacking/IT Incident affecting 735 individuals. Breached information located on Network Server. The business associate experienced a cyber-attack compromising PHI including names, addresses, DOB, SSNs, claims, medications, and diagnoses. Response included credit monitoring and enhanced safeguards.

Affected (this filing): 735

Benefit Plan Administrators, Inc. (a business associate based in VA) reported to HHS OCR on 2022-06-27 that a cyber-attack on a network server compromised PHI of 1,267 individuals. Exposed data included names, addresses, dates of birth, Social Security numbers, gender, claims information, medications, and diagnoses. The BA offered complimentary credit monitoring and implemented additional administrative, technical, and security safeguards. Exact attack technique (e.g., ransomware vs. unauthorized access) is not specified in the OCR summary.

Affected (this filing): 1,267

State of New Hampshire Attorney General breach notification filed by Benefit Plan Administrators, Inc. on June 27, 2022. The source document is a PDF attachment containing only page markers; no substantive breach details, dates, or data types are visible in the provided text.

Benefit Plan Administrators, Inc. filed a breach notification with the South Carolina Office of the Attorney General in 2022. The source document is a 4-page PDF, but the text extraction returned empty content, preventing the extraction of specific incident details, affected counts, or data types.

Benefit Plan Administrators, Inc. reported to HHS on 2022-06-30 a Hacking/IT Incident affecting 628 individuals. Breached information located on Network Server. The cyber-attack compromised PHI including names, addresses, DOB, SSNs, claims, medications, and diagnoses. The BA provided credit monitoring and implemented safeguards.

Affected (this filing): 628

Benefit Plan Administrators, Inc. reported to HHS on 2022-07-08 a Hacking/IT Incident affecting 1089 individuals. Breached information located on Network Server. The business associate experienced a cyber-attack compromising PHI including names, addresses, DOB, SSNs, claims, medications, and diagnoses. Response included complimentary credit monitoring and implementation of additional safeguards.

Affected (this filing): 1,089