CodeMetro

Disclosed Jun 19, 202062,807 affectedConfirmed

The covered entity (CE), CodeMetro, Inc., reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of approximately 62,807 individuals. The ePHI involved included names, Social Security numbers, addresses, dates of birth, diagnoses/conditions, health insurance information, and claims information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Following OCR’s investigation, the CE retrained its workforce members and implemented additional technical safeguards.

What is known

People affected	62,807 (as reported to HHS)
Disclosed	Jun 19, 2020
Discovered	May 29, 2020
Happened	Apr 21, 2020
Attack	Hacking
Data exposed	NamesSocial Security numbersGovernment IDsHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: CodeMetro

Official noticemaine.gov

Maine Attorney General breach notice archive: CodeMetro

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): CodeMetro (Business Associate, CA)

Notices filed

Residents of CAJun 19, 2020

California AGCount not stated

Residents of MEJun 19, 2020

Maine AG4 people

TotalJun 19, 2020

HHS archive62,807 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

["names","ssn","government-id"] to ["names","ssn","government-id","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

1540 to 62807by backfillSource

summary2026-09-25

empty to The covered entity (CE), CodeMetro, Inc., reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of approximately 62,807 individuals. The ePHI involved included names, Social Security nuby backfillSource

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

[] to ["names","ssn","government-id"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 1540by backfillSource

discovered2026-09-25

empty to 2020-05-29by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about CodeMetro