Bon Secours Health System
Disclosed Aug 12, 201610 years ago651,971 affectedConfirmed
Vendor left data of 655,000 patients exposed on the internet
A business associate of Bon Secours left names, insurance details, Social Security numbers and clinical information of about 655,000 people unsecured on the internet. Bon Secours ended the vendor relationship.
What is known
| People affected | 651,971 (as reported by the organization) |
|---|---|
| Disclosed | Aug 12, 2016 |
| Happened | Apr 18, 2016 |
| Attack | Exposed data |
| Data exposed | Names, Insurance, Social Security numbers, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Bon Secours Health Systemoag.ca.gov · Official notice | Official notice |
| HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individualsocrportal.hhs.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 12, 2016 | |
| Researchtotal | Aug 12, 2016 | 651,971 |
| HHS archivetotal | Aug 12, 2016 | 651,971 |
History of this record
- 2026-09-25 · attack: unknown to misconfiguration · seed source
- 2026-09-25 · data_types: [] to ["names","insurance","ssn","health"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 651971 · seed source
- 2026-09-25 · summary: empty to A business associate of Bon Secours left names, insurance details, Social Security numbers and clinical information of about 655,000 people unsecured on the internet. Bon Secours ended the vendor relationship. · seed source
- 2026-09-25 · title: empty to Vendor left data of 655,000 patients exposed on the internet · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.