Skip to content

Altos

Disclosed Aug 1, 20251 year ago15,956 affectedConfirmed

Official notice

The business associate (BA), Altos reported that it was the subject of a data breach that affected the protected health information (PHI) of 1,634 individuals. The PHI involved included clinical and demographic information. The BA notified HHS and affected individuals. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected15,956 (as reported by the organization)
DisclosedAug 1, 2025
HappenedMay 30, 2025
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Altosoag.ca.gov · Official notice
Indiana Attorney General 2025 data breach report: Altosin.gov · Official notice
HHS OCR breach report (archive, resolved): Altos (Business Associate, CA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAAug 1, 2025
Indiana AGresidents of INAug 1, 20257
HHS archivetotalAug 11, 20251,634
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · summary: empty to The business associate (BA), Altos reported that it was the subject of a data breach that affected the protected health information (PHI) of 1,634 individuals. The PHI involved included clinical and demographic information. The BA notified · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 15956 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Altos

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.