HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 30, 2022.
- Organization as reported
- Highmark, Inc., PA
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- June 30, 2022
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11344, row:2483)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Highmark, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 511 individuals. The PHI involved included names and medication information. The CE and its BA notified affected individuals; the CE notified HHS. In its mitigation efforts, the CE implemented new administrative and technical safeguards to better protect its PHI.