Skip to content

CareTracker

Disclosed Aug 18, 20251 year ago501 affectedConfirmed

Official notice

What is known

People affected501 (as reported to HHS)
DisclosedAug 18, 2025
HappenedJun 15, 2025
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: CareTrackeroag.ca.gov · Official notice
HHS OCR breach report: CareTracker (Business Associate, NY)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS OCRtotalAug 18, 2025501
California AGresidents of CANov 12, 2025
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 501 · backfill source
  • 2026-09-25 · disclosed: 2025-11-12 to 2025-08-18 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about CareTracker

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.