Bay Bridge Administrators
Disclosed Dec 29, 20223 years ago251,689 affectedConfirmed
The business associate (BA), Bay Bridge Administrators, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 187,742 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license information, and other identifiers. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented new administrative and technical safeguards. Staff were also retrained in its requirements to protect and secure PHI.
What is known
| People affected | 251,689 (as reported by the organization) |
|---|---|
| Disclosed | Dec 29, 2022 |
| Discovered | Sep 5, 2022 |
| Happened | Sep 3, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Bay Bridge Administratorsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Bay Bridge Administratorsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Bay Bridge Administratorsjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Bay Bridge Administratorsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Bay Bridge Administrators (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 29, 2022 | |
| Washington AGresidents of WA | Dec 29, 2022 | 6,980 |
| Oregon DOJresidents of OR | Dec 29, 2022 | 251,689 |
| Indiana AGresidents of IN | Dec 29, 2022 | 6,269 |
| HHS archivetotal | Dec 30, 2022 | 187,742 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Bay Bridge Administrators, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 187,742 individuals. The PHI involved included names, addresses, dates of bir · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 251689 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2022-09-05 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.