CareCentrix

Disclosed Jul 11, 2019467,621 affectedConfirmed

CareCentrix, Inc., the covered entity (CE), reported that its business associate (BA), American Medical Collection Agency, discovered unauthorized access to its web payment portal. The breach affected 467,621 individuals and the protected health information (PHI) involved included identification numbers, insurance information, names, dates of birth, addresses, phone numbers, social security numbers, and financial information. CareCentrix notified all affected individuals as well as the media. As a result of the breach, CareCentrix dissolved its business associate relationship.

What is known

People affected	467,621 (as reported to HHS)
Disclosed	Jul 11, 2019
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): CareCentrix (Healthcare Provider, CT)

Notices filed

TotalJul 11, 2019

HHS archive467,621 people

Other breaches at CareCentrix

Breach, details not statedExposed names, Social Security numbers and names. Reported to the Maine AG.USMar 21, 2016 Breach, details not statedExposed names, Social Security numbers, health records, addresses and names. Reported to the Maine AG.USSep 18, 2014

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about CareCentrix