Skip to content

Cherry Street Services

Disclosed Feb 29, 20242 years ago184,372 affectedConfirmed

Official notice

The covered entity (CE), Cherry Street Services dba Cherry Health, reported that it experienced a hacking attack affecting the protected health information (PHI) of 181,820 individuals. The PHI involved included names, addresses, phone numbers, dates of birth, social security numbers, health insurance information, claims and financial information, diagnoses, and other treatment information. The CE notified HHS, the affected individuals, and the media. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.

What is known

People affected184,372 (as reported by the organization)
DisclosedFeb 29, 2024
HappenedDec 21, 2023
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalFeb 29, 2024181,820
Indiana AGresidents of INApr 16, 202489
Vermont AGresidents of VTApr 17, 2024

Other breaches at Cherry Street Services

BreachAffected
Disclosed Jun 18, 2026Jun 183 months agoHacking501
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · disclosed: 2024-04-16 to 2024-02-29 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Cherry Street Services dba Cherry Health, reported that it experienced a hacking attack affecting the protected health information (PHI) of 181,820 individuals. The PHI involved included names, addresses, phone numb · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 184372 · backfill source
  • 2026-09-25 · disclosed: 2024-04-17 to 2024-04-16 · backfill source
  • 2026-09-25 · occurred: empty to 2023-12-21 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Cherry Street Services

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.