Kaiser Permanente data breach
Was I affected?
Kaiser Permanente confirmed a breach affecting about 13.4 million people, exposing names. You may be affected if you used Kaiser Permanente's website or app as a member and received Kaiser's notice about online tracking technologies.
| Announced | Apr 25, 2024 |
|---|---|
| When it happened | Tracking code on websites and apps until early 2024 |
| People affected | 13.4 million |
| Data exposed | Names and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Kaiser Foundation Health Plan reported to HHS that advertising and analytics code on its websites and mobile apps may have sent member information to Google, Microsoft Bing and X. The data could include IP addresses, names, whether a member was signed in, and pages visited or search terms used in its online health encyclopedia. Kaiser said no passwords, Social Security numbers or financial details were included and removed the trackers; about 13.4 million people were notified.
What should I do?
- Review the ad-personalization and activity settings in your Google, Microsoft and X accounts and clear stored activity you don't want kept.
- Use a browser with tracker blocking, or log out of ad-platform accounts before browsing health sites.
- Treat emails, texts and calls that mention Kaiser Permanente as suspect; don't click links or share codes, and contact the company through its official app or website.
- No credit freeze is needed for this incident because no SSNs or financial data were involved.
Check the other services you use →
Sources
- Kaiser Permanente notifying 13.4 million of tracker breach · GovInfoSecurity (news)
- Kaiser Permanente: data breach might affect 13.4M members · Healthcare Innovation (news)