Skip to content

Arbor Associates

Disclosed Jul 3, 20251 year ago17,040 affectedConfirmed

Official notice

What is known

People affected17,040 (as reported to HHS)
DisclosedJul 3, 2025
DiscoveredApr 17, 2025
HappenedApr 15, 2025
AttackRansomware
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Arbor Associatesoag.ca.gov · Official notice
Washington Attorney General breach notice: Arbor Associatesatg.wa.gov · Official notice
Oregon DOJ breach notice: Arbor Associatesjustice.oregon.gov · Official notice
HHS OCR breach report: Arbor Associates (Business Associate, MI)ocrportal.hhs.gov · Official notice
Vermont Attorney General: 2025-07-17 Arbor Associates Data Breach Notice to Consumersago.vermont.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJul 3, 2025
Washington AGresidents of WAJul 3, 20259,005
HHS OCRtotalJul 3, 202517,040
Oregon DOJresidents of ORJul 17, 202546,081
Vermont AGresidents of VTJul 17, 2025
California AGresidents of CAAug 8, 2025
History of this record
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-07-17-arbor-associates-data-breach-notice-consumers · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 17040 · backfill source
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · discovered: empty to 2025-04-17 · backfill source
  • 2026-09-25 · disclosed: 2025-08-08 to 2025-07-03 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Arbor Associates

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.