Skip to content

Catholic Charities of the Diocese of Rockville Centre

Disclosed Nov 3, 20232 years ago13,000 affectedConfirmed

Official notice

The covered entity (CE), Catholic Charities of the Diocese of Rockville Centre dba Catholic Charities of Long Island, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 13,000 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional technical and security safeguards to better protect its PHI.

What is known

People affected13,000 (as reported to HHS)
DisclosedNov 3, 2023
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalNov 3, 202313,000
Vermont AGresidents of VTNov 14, 2023
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 13000 · backfill source
  • 2026-09-25 · disclosed: 2023-11-14 to 2023-11-03 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Catholic Charities of the Diocese of Rockville Centre dba Catholic Charities of Long Island, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 13,000 individu · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Catholic Charities of the Diocese of Rockville Centre

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.