Berkeley Research Group

Disclosed Apr 30, 20251 year ago1,185,755 affectedConfirmed

What is known

People affected	1,185,755 (as reported by the organization)
Disclosed	Apr 30, 2025
Discovered	Mar 2, 2025
Happened	Feb 28, 2025
Attack	Ransomware
Data exposed	Names, Government IDs, Health, Insurance, Credentials and tokens, Social Security numbers, Payment cards, Financial, Dates of birth, Addresses
Sector	Healthcare · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Berkeley Research Groupoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Berkeley Research Groupatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Berkeley Research Groupattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: Berkeley Research Groupjustice.oregon.gov · Official notice	Official notice
HHS OCR breach report: Berkeley Research Group (Business Associate, CA)ocrportal.hhs.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0005295: Berkeley Research Groupoag.my.site.com · Official notice	Official notice
Vermont Attorney General: 2025-10-30 Berkeley Research Group Data Breach Notice to Consumersago.vermont.gov · Official notice	Official notice
Indiana Attorney General 2025 data breach report: Berkeley Research Groupin.gov · Official notice	Official notice

Where	Filed	People
HHS OCRtotal	Apr 30, 2025	500
California AGresidents of CA	Oct 30, 2025
Washington AGresidents of WA	Oct 30, 2025	17,188
Delaware DOJresidents of DE	Oct 30, 2025
Oregon DOJresidents of OR	Oct 30, 2025	6,083
Vermont AGresidents of VT	Oct 30, 2025
Indiana AGresidents of IN	Oct 30, 2025	3
California AGresidents of CA	Aug 31
Texas AGresidents of TX	Sep 1	92,290

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Aug 31, 2026Aug 313 weeks ago	Aug 313 weeks ago	Not stated	Healthcare	Confirmed	Unknown

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-10-30-berkeley-research-group-data-breach-notice-consumers · backfill source
2026-09-25 · data_types: ["names","government-id","health","insurance","credentials"] to ["names","government-id","health","insurance","credentials","ssn","payment-card","financial","dob","addresses"] · backfill source
2026-09-25 · records: 6083 to 1185755 · backfill source
2026-09-25 · sector: other to health · backfill source
2026-09-25 · disclosed: 2025-10-30 to 2025-04-30 · backfill source
2026-09-25 · data_types: [] to ["names","government-id","health","insurance","credentials"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 6083 · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2025-03-02 · backfill source
2026-09-25 · disclosed: 2026-08-31 to 2025-10-30 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.