Abeo Solutions

Disclosed Sep 13, 202121,112 affectedConfirmed

The covered entity (CE), Abeo Solutions dba Crystal Practice Management, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of approximately 21,112 individuals. The PHI involved included Social Security numbers, drivers’ license numbers, diagnoses, medications prescribed, lab results, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. OCR has initiated a compliance review of the business associate regarding this breach.

What is known

People affected	21,112 (as reported to HHS)
Disclosed	Sep 13, 2021
Discovered	Nov 24, 2020
Attack	Ransomware
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Abeo Solutions

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Abeo Solutions (Business Associate, TX)

Notices filed

TotalSep 13, 2021

HHS archive21,112 people

Residents of WAOct 20, 2021

Washington AG6,141 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 21112by backfillSource

disclosed2026-09-25

2021-10-20 to 2021-09-13by backfillSource

summary2026-09-25

empty to The covered entity (CE), Abeo Solutions dba Crystal Practice Management, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of approximately 21,112 individualby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Abeo Solutions