Back to the register

Fairfax County Public Schools' Health Plan

ArchivedSubmitted 02/02/2021
State
VA
Covered entity type
Business Associate
Individuals affected
11,056
Business associate present
Yes
Type of breach
Hacking/IT Incident
Location of breached information
Email
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

Fairfax County Public Schools’ Health Plan, the covered entity (CE), reported that an employee of a vendor of its business associate (BA) was the victim of an email phishing scheme that compromised the protected health information (PHI) of 11,056 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and clinical information. The CE notified HHS, affected individuals, and the media. The BA provided affected individuals with free credit monitoring services.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.