Skip to content
Network USA

HHS OCR report ยท 2022

Employee Group Insurance Benefits Plan of Acuity Brands, Inc. data breach

Employee Group Insurance Benefits Plan of Acuity Brands, Inc., a health plan in Georgia, reported a breach affecting 20,849 individuals to HHS OCR on Dec 6, 2022.

OCR report facts

Covered entity
Employee Group Insurance Benefits Plan of Acuity Brands, Inc.
Entity type
Health Plan
State
Georgia
Individuals affected
20,849
Submission date
Dec 6, 2022
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), Employee Group Insurance Benefits Plan of Acuity Brands, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 20,849 individuals. The PHI involved included names, Social Security numbers, and health insurance and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring services and implemen...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Employee Group Insurance Benefits Plan of Acuity Brands, Inc. data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Employee Group Insurance Benefits Plan of Acuity Brands, Inc. legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Employee Group Insurance Benefits Plan of Acuity Brands, Inc..