Ardon Health

Disclosed Nov 22, 202410,098 affectedConfirmed

The covered entity (CE), Ardon Health, LLC, reported that several employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 10,098 individuals. The PHI involved included names, addresses, medications, birthdates, and treatment information. The CE notified HHS, affected individuals and the media. In response to the breach and OCR’s investigation, the CE has updated its technical safeguards. OCR also provided technical assistance to the CE regarding the HIPAA Security Rule.

What is known

People affected	10,098 (as reported to HHS)
Disclosed	Nov 22, 2024
Discovered	Sep 27, 2024
Happened	Sep 9, 2024
Attack	Phishing
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Ardon Health

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Ardon Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Ardon Health (Healthcare Provider, OR)

Notices filed

Residents of WANov 22, 2024

Washington AG6,527 people

Residents of ORNov 22, 2024

Oregon DOJ10,098 people

TotalNov 22, 2024

HHS archive10,098 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 10098by backfillSource

summary2026-09-25

empty to The covered entity (CE), Ardon Health, LLC, reported that several employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 10,098 individuals. The PHI involved included names, addressesby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Ardon Health