Bayhealth Medical Center

Disclosed Oct 4, 2024497,047 affectedConfirmed

The covered entity (CE), Bayhealth Medical Center, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 497,047 individuals. The PHI involved included Social Security numbers, addresses, dates of birth, diagnoses/conditions, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained.

What is known

People affected	497,047 (as reported to HHS)
Disclosed	Oct 4, 2024
Happened	Jul 27, 2024
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Bayhealth Medical Center

Official noticeago.vermont.gov

Vermont Attorney General: 2025-02-03 Bayhealth Medical Center Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Bayhealth Medical Center (Healthcare Provider, DE)

Notices filed

TotalOct 4, 2024

HHS archive497,047 people

Residents of CAFeb 3, 2025

California AGCount not stated

Residents of VTFeb 3, 2025

Vermont AGCount not stated

Other breaches at Bayhealth Medical Center

Hacking breachHacking exposed names and health records. Reported to the HHS archive.17K affectedHealthcareUSJun 30, 2022 Hacking breachHacking exposed names and health records. Reported to the HHS archive.78K affectedHealthcareUSNov 20, 2020

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 497047by backfillSource

disclosed2026-09-25

2025-02-03 to 2024-10-04by backfillSource

summary2026-09-25

empty to The covered entity (CE), Bayhealth Medical Center, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 497,047 individuals. The PHI involved included Social Security numbers, addresses, dateby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-02-03-bayhealth-medical-center-data-breach-notice-consumersby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Bayhealth Medical Center