Breachesby GlyphA New Leaf
Disclosed Dec 30, 202117,150 affectedConfirmed
The covered entity (CE), A New Leaf, Inc., reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 10,438 individuals. The PHI involved included names, addresses, Social Security numbers, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Following OCR’s investigation, the CE retrained its workforce members and implemented additional technical safeguards to better protect its PHI.
What is known
| People affected | 17,150 (as reported by the organization) |
|---|---|
| Disclosed | Dec 30, 2021 |
| Happened | Mar 30, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
other to healthby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to The covered entity (CE), A New Leaf, Inc., reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 10,438 individuals. The PHI involved included names, addresses, Social Secuby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.