Bon Secours Health System

Disclosed Aug 12, 2016651,971 affectedConfirmed

Vendor left data of 655,000 patients exposed on the internet

A business associate of Bon Secours left names, insurance details, Social Security numbers and clinical information of about 655,000 people unsecured on the internet. Bon Secours ended the vendor relationship.

What is known

People affected	651,971 (as reported by the organization)
Disclosed	Aug 12, 2016
Happened	Apr 18, 2016
Attack	Exposed data
Data exposed	NamesInsuranceSocial Security numbersHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Bon Secours Health System

Regulatorocrportal.hhs.gov

HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individuals

Notices filed

Residents of CAAug 12, 2016

California AGCount not stated

TotalAug 12, 2016

Research651,971 people

TotalAug 12, 2016

HHS archive651,971 people

History of this record

attack2026-09-25

unknown to misconfigurationby seedSource

data_types2026-09-25

[] to ["names","insurance","ssn","health"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 651971by seedSource

summary2026-09-25

empty to A business associate of Bon Secours left names, insurance details, Social Security numbers and clinical information of about 655,000 people unsecured on the internet. Bon Secours ended the vendor relationship.by seedSource

title2026-09-25

empty to Vendor left data of 655,000 patients exposed on the internetby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Bon Secours Health System