Kaiser Permanente Hit in Attack; 70,000 Records Exposed

June 14, 2022

INCIDENT

Kaiser Permanente, the largest nonprofit health plan provider in the United States, suffered a data breach after an attacker gained access to a worker’s emails which exposed health information of almost 70,000 patients.
In a notice to patients on June 3, Kaiser revealed someone gained access to an employee’s emails at the Kaiser Foundation Health Plan of Washington on April 5 that contained protected health information, including patient names, dates of service, medical record numbers, and lab test result information.
Financially sensitive information, including social security and credit card numbers, was not exposed by the breach, according to the healthcare provider.

Incident Date

April 5, 2022

Estimated Cost

Almost 70,000 health information records stolen. Kaiser revealed someone gained access to an employee’s emails, possibly through a phishing attack, at the Kaiser Foundation Health Plan of Washington on April 5 that contained protected health information, including patient names, dates of service, medical record numbers, and lab test result information.

Type of Malware

No Malware identified

Threat Source

No threat source identified