Skip to content

BrightSpring Health Services

Disclosed Jun 21, 20233 years ago535,203 affectedConfirmed

Official notice

What is known

People affected535,203 (as reported by the organization)
DisclosedJun 21, 2023
DiscoveredMar 14, 2023
HappenedMar 12, 2023
AttackRansomware
Data exposedNot stated
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Indiana AGresidents of INJun 21, 202337,646
California AGresidents of CAAug 11, 2023
Washington AGresidents of WAAug 11, 202328,194
Oregon DOJresidents of ORAug 11, 2023535,203
Vermont AGresidents of VTAug 11, 2023
History of this record
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 535203 · backfill source
  • 2026-09-25 · disclosed: 2023-08-11 to 2023-06-21 · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-08-11-brightspring-health-services-data-breach-notice-consumers · backfill source
  • 2026-09-25 · attack: unknown to ransomware · backfill source
  • 2026-09-25 · discovered: empty to 2023-03-14 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about BrightSpring Health Services

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.