AuthoraCare Collective
Disclosed Nov 19, 20241 year ago60,384 affectedConfirmed
The covered entity (CE), AuthoraCare Collective, reported that it experienced a cyberattack that affected the protected health information (PHI) of 57,944 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, the affected individuals, and the media, In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 60,384 (as reported by the organization) |
|---|---|
| Disclosed | Nov 19, 2024 |
| Happened | Aug 18, 2024 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2025 data breach report: AuthoraCare Collectivein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): AuthoraCare Collective (Healthcare Provider, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 19, 2024 | 57,944 |
| Indiana AGresidents of IN | Apr 10, 2025 | 1 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2025-04-10 to 2024-11-19 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), AuthoraCare Collective, reported that it experienced a cyberattack that affected the protected health information (PHI) of 57,944 individuals. The PHI involved included clinical and demographic information. The CE n · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.