Capsule
Disclosed May 27, 20224 years ago27,625 affectedConfirmed
The covered entity (CE), Capsule, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of approximately 27,625 individuals. The PHI involved included names, addresses, dates of birth, diagnoses/conditions, and medications. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided affected individuals with complimentary credit monitoring services and implemented additional technical safeguards.
What is known
| People affected | 27,625 (as reported to HHS) |
|---|---|
| Disclosed | May 27, 2022 |
| Happened | Apr 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Capsuleoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Capsule (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 27, 2022 | |
| HHS archivetotal | May 27, 2022 | 27,625 |
| California AGresidents of CA | Jul 30, 2022 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 27625 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Capsule, Inc., reported that it was the victim of a hacking incident that affected the protected health information (PHI) of approximately 27,625 individuals. The PHI involved included names, addresses, dates of bir · backfill source
- 2026-09-25 · disclosed: 2022-07-30 to 2022-05-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.