HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 10, 2024.
- Organization as reported
- Rumpke Consolidated Companies, Inc. & Affiliates Benefits Plan, OH
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Dec. 10, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9564, row:703)
- Archived copy
- Held in the private archive (provenance)
Rumpke Consolidated Companies & Affiliated Benefits Plan, the covered entity (CE), reported that it experienced a cyberattack that affected the protected health information (PHI) of 16,946 individuals. The PHI involved included demographic and clinical information. The CE notified HHS, affected individuals, and the media. The CE took several corrective actions in response to the breach including implementing multifactor authentication and other technical safeguards.