HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 20, 2026.
- Organization as reported
- Wellpoint Washington, Inc., IN
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- May 20, 2026
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 8918, row:57)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Wellpoint Washington, Inc., reported that an employee of its business associate (BA) was the target of an email phishing scheme that affected the protected health information (PHI) of approximately 12,020 individuals. The PHI involved demographic and clinical data. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.