Breachesby GlyphBay Area Community Health
Disclosed Jan 16, 20269,912 affectedConfirmed
The covered entity (CE), Bay Area Community Health, reported that a subcontractor of its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 9,912 individuals. The PHI involved clinical and demographic information. The CE and notified HHS, affected individuals, and the media, and the subcontractor will also be notifying individuals on the CE’s behalf. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 9,912 (as reported to HHS) |
|---|---|
| Disclosed | Jan 16, 2026 |
| Happened | Nov 1, 2024 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 9912by backfillSource
empty to The covered entity (CE), Bay Area Community Health, reported that a subcontractor of its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 9,912 individuals. The PHI involved clinicalby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.