Ascend Clinical
Disclosed Oct 19, 20205 years ago77,443 affectedConfirmed
The covered entity (CE), Ascend Clinical, LLC, reported that numerous employees were the victims of an email phishing attack that affected the electronic protected health information (ePHI) of 77,443 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and medications prescribed. The CE notified HHS, affected individuals, the media, and provided free credit monitoring, identity theft, and fraud protection services. In response to the breach, the CE implemented additional administrative, technical, and security safeguards and retrained its staff.
What is known
| People affected | 77,443 (as reported by the organization) |
|---|---|
| Disclosed | Oct 19, 2020 |
| Discovered | May 31, 2020 |
| Happened | Apr 21, 2020 |
| Attack | Phishing |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Ascend Clinicaloag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Ascend Clinicalatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Ascend Clinicaljustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2020 data breach report: Ascend Clinicalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Ascend Clinical (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 19, 2020 | 77,443 |
| California AGresidents of CA | Oct 26, 2020 | |
| Washington AGresidents of WA | Oct 27, 2020 | 1,959 |
| Oregon DOJresidents of OR | Oct 27, 2020 | 77,443 |
| Indiana AGresidents of IN | Nov 3, 2020 | 943 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2020-10-26 to 2020-10-19 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Ascend Clinical, LLC, reported that numerous employees were the victims of an email phishing attack that affected the electronic protected health information (ePHI) of 77,443 individuals. The ePHI involved included · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 77443 · backfill source
- 2026-09-25 · attack: unknown to phishing · backfill source
- 2026-09-25 · discovered: empty to 2020-05-31 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.