Skip to content
Network USA

HHS OCR report · 2022

Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans data breach

Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans, a health plan in New Jersey, reported a breach affecting 10,023 individuals to HHS OCR on Jan 24, 2022.

OCR report facts

Covered entity
Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans
Entity type
Health Plan
Individuals affected
10,023
Submission date
Jan 24, 2022
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) today announced a settlement with Spencer Gifts LLC Flexible Benefits and Welfare Benefit Plans (the Plan), the employer-sponsored group health plan of Spencer Gifts LLC, a national retail company, over potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules. OCR enforces the HIPAA Privacy, Security, and Breach Notification Rules (HIPAA Rule...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Spencer’s Gifts LLC Flexible Benefits and Welfare Benefit Plans.