HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 22, 2024.
- Organization as reported
- Arkansas Blue Cross and Blue Shield, AR
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Oct. 22, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9649, row:788)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Arkansas Blue Cross and Blue Shield, reported that its business associate (BA), experienced a cyber-attack that compromised the protected health information (PHI) of 633 individuals. The PHI involved included demographic and clinical information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented new technical safeguards.