- State
- CA
- Covered entity type
- Health Plan
- Individuals affected
- 13,400,000
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
The covered entity (CE), Kaiser Foundation Health Plan, Inc., reported that it disclosed the protected health information (PHI) for up to 13,134,908 individuals while using third-party tracking technologies. The PHI involved clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE: removed all third-party tracking technologies from its authenticated online platforms, trained or retrained workforce members, and implemented additional administrative safeguards.
Change history
- 9/23/2026Added to OCR's archive list
Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.