HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 19, 2026.
- Organization as reported
- UnitedHealth Care Services, Inc. Single Affiliated Covered Entity, CT
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- June 19, 2026
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 8901, row:40)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), United Healthcare Services, reported that an employee of its business associate (BA) was the target of an email phishing scheme that compromised the protected health information (PHI) of approximately 37,384 individuals. The PHI involved demographic, financial and treatment information. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.