Skip to content

Abeo Solutions

Disclosed Sep 13, 20215 years ago21,112 affectedConfirmed

Official notice

The covered entity (CE), Abeo Solutions dba Crystal Practice Management, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of approximately 21,112 individuals. The PHI involved included Social Security numbers, drivers’ license numbers, diagnoses, medications prescribed, lab results, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. OCR has initiated a compliance review of the business associate regarding this breach.

What is known

People affected21,112 (as reported to HHS)
DisclosedSep 13, 2021
DiscoveredNov 24, 2020
AttackRansomware
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
Washington Attorney General breach notice: Abeo Solutionsatg.wa.gov · Official notice
HHS OCR breach report (archive, resolved): Abeo Solutions (Business Associate, TX)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalSep 13, 202121,112
Washington AGresidents of WAOct 20, 20216,141
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 21112 · backfill source
  • 2026-09-25 · disclosed: 2021-10-20 to 2021-09-13 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Abeo Solutions dba Crystal Practice Management, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of approximately 21,112 individual · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Abeo Solutions

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.