Breachesby GlyphApria Healthcare
Disclosed Mar 28, 2025713 affectedConfirmed
The covered entity (CE), Apria Healthcare, reported that an employee mailed the protected health information (PHI) of 731 individuals to the wrong recipients. The PHI involved included names, addresses, and unique identification numbers. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 713 (as reported to HHS) |
|---|---|
| Disclosed | Mar 28, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Apria Healthcare
Hacking breachHacking exposed names and health records. Reported to the California AG.1.9M affectedHealthcareUSMay 16, 2022Insider breachInsider exposed names and health records. Reported to the California AG.1,987 affectedHealthcareUSOct 4, 2016Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the California AG.66K affectedHealthcareUSAug 15, 2012
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.