Skip to content
Network USA

HHS OCR report ยท 2026

District of Columbia, Department of Health Care Finance data breach

District of Columbia, Department of Health Care Finance, a health plan in Maryland, reported a breach affecting 399,086 individuals to HHS OCR on Sep 3, 2026.

OCR report facts

Covered entity
District of Columbia, Department of Health Care Finance
Entity type
Health Plan
Individuals affected
399,086
Submission date
Sep 3, 2026
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Electronic Medical Record
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), District of Columbia, Department of Health Care Finance, reported that a vulnerability in its website resulted in hidden protected health information (PHI) for two reports on its website could be accessed by individuals without authorization. According to the breach report, the breach affected approximately 399,086 individuals. The PHI involved dates of birth and other identifiers. The CE notified HHS, the media, and the affected individuals. In its mitigation eff...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the District of Columbia, Department of Health Care Finance data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from District of Columbia, Department of Health Care Finance legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or District of Columbia, Department of Health Care Finance.