Berkeley Research Group

Disclosed Apr 30, 20251,185,755 affectedConfirmed

What is known

People affected	1,185,755 (as reported by the organization)
Disclosed	Apr 30, 2025
Discovered	Mar 2, 2025
Happened	Feb 28, 2025
Attack	Ransomware
Data exposed	NamesGovernment IDsHealthInsuranceCredentials and tokensSocial Security numbersPayment cardsFinancialDates of birthAddresses
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Berkeley Research Group

Official noticeatg.wa.gov

Washington Attorney General breach notice: Berkeley Research Group

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Berkeley Research Group

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Berkeley Research Group

Official noticeocrportal.hhs.gov

HHS OCR breach report: Berkeley Research Group (Business Associate, CA)

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005295: Berkeley Research Group

Official noticeago.vermont.gov

Vermont Attorney General: 2025-10-30 Berkeley Research Group Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2025 data breach report: Berkeley Research Group

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Berkeley Research Group

Notices filed

TotalApr 30, 2025

HHS OCR500 people

Residents of CAOct 30, 2025

California AGCount not stated

Residents of WAOct 30, 2025

Washington AG17,188 people

Residents of DEOct 30, 2025

Delaware DOJCount not stated

Residents of OROct 30, 2025

Oregon DOJ6,083 people

Residents of VTOct 30, 2025

Vermont AGCount not stated

Residents of INOct 30, 2025

Indiana AG3 people

Residents of DEOct 30, 2025

Delaware DOJCount not stated

Residents of DEOct 30, 2025

Delaware DOJ4,123 people

Residents of CAAug 31

California AGCount not stated

Residents of TXSep 1

Texas AG92,290 people

Other breaches at Berkeley Research Group

Breach, details not statedExposed names, Social Security numbers, government IDs, health records, payment cards and financial details. Reported to the Vermont AG.HealthcareUSAug 31

History of this record

source2026-10-07

empty to https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/09/BRG-Adult-CM-2Y.pdfby weeklySource

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-10-30-berkeley-research-group-data-breach-notice-consumersby backfillSource

data_types2026-09-25

["names","government-id","health","insurance","credentials"] to ["names","government-id","health","insurance","credentials","ssn","payment-card","financial","dob","addresses"]by backfillSource

records2026-09-25

6083 to 1185755by backfillSource

sector2026-09-25

other to healthby backfillSource

disclosed2026-09-25

2025-10-30 to 2025-04-30by backfillSource

data_types2026-09-25

[] to ["names","government-id","health","insurance","credentials"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 6083by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2025-03-02by backfillSource

disclosed2026-09-25

2026-08-31 to 2025-10-30by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Berkeley Research Group