BAYADA Home Health Care
Disclosed Jan 30, 2026550,164 affectedConfirmed
The covered entity (CE), BAYADA Home Health Care, Inc., reported that its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 9,526 individuals. The PHI involved demographic and clinical information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE terminated the agreement with the BA and implemented additional technical and administrative safeguards.
What is known
| People affected | 550,164 (as reported by the organization) |
|---|---|
| Disclosed | Jan 30, 2026 |
| Discovered | Jul 1, 2026 |
| Happened | Mar 2, 2026 |
| Attack | Hacking |
| Data exposed | NamesSocial Security numbersGovernment IDsHealthInsurancePayment cardsFinancial |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: BAYADA Home Health CareNotice letter filed with the Delaware DOJ: BAYADA Home Health CareHHS OCR breach report: BAYADA Home Health Care (Healthcare Provider, NJ)Texas Attorney General data security breach report BR-0005185: BAYADA Home Health CareVermont Attorney General breach report: BAYADA Home Health CareVermont Attorney General: 2026-01-30 BAYADA Home Health Care Data Breach Notice to ConsumersIndiana Attorney General 2026 data breach report: BAYADA Home Health Care
Notices filed
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby weeklySource
empty to The covered entity (CE), BAYADA Home Health Care, Inc., reported that its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 9,526 individuals. The PHI involved demographic and cliby backfillSource
2026-05-04 to 2026-01-30by backfillSource
empty to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource
["names","ssn","government-id","health","insurance"] to ["names","ssn","government-id","health","insurance","payment-card","financial"]by backfillSource
unknown to hackingby backfillSource
2026-07-17 to 2026-05-04by backfillSource
[] to ["names","ssn","government-id","health","insurance"]by backfillSource
empty to organizationby backfillSource
empty to 550164by backfillSource
empty to 2026-07-01by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.