Boulder Neurosurgical and Spine Associates
Disclosed Nov 29, 20214 years ago21,450 affectedConfirmed
The covered entity (CE), Boulder Neurosurgical and Spine Associates, reported that an employee was the victim of an email phishing attack which affected the protected health information (PHI) of 21,450 individuals. The PHI involved included names, dates of birth, diagnoses, lab results, medications prescribed, and other treatment information. The CE closed its business; the investigation was subsequently closed.
What is known
| People affected | 21,450 (as reported to HHS) |
|---|---|
| Disclosed | Nov 29, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Boulder Neurosurgical and Spine Associates (Healthcare Provider, CO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 29, 2021 | 21,450 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.