Comprehensive Health Services
Disclosed Feb 15, 20224 years ago106,752 affectedConfirmed
The covered entity (CE), Comprehensive Health Services, reported that several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 106,752 individuals. The PHI involved included names, Social Security numbers, and drug testing invoices. The CE notified HHS, affected individuals, the media, and posted substitute breach notice on its website. In its mitigation efforts, the CE offered complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect its PHI.
What is known
| People affected | 106,752 (as reported to HHS) |
|---|---|
| Disclosed | Feb 15, 2022 |
| Discovered | Sep 30, 2020 |
| Happened | Apr 9, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Comprehensive Health Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Comprehensive Health Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Comprehensive Health Servicesjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Comprehensive Health Services (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Feb 15, 2022 | |
| Washington AGresidents of WA | Feb 15, 2022 | 2,785 |
| Oregon DOJresidents of OR | Feb 15, 2022 | 94,449 |
| HHS archivetotal | Feb 15, 2022 | 106,752 |
| California AGresidents of CA | Mar 16, 2022 | |
| Oregon DOJresidents of OR | Mar 16, 2022 | 95,297 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 106752 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Comprehensive Health Services, reported that several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 106,752 individuals. The PHI involved included n · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2020-09-30 · backfill source
- 2026-09-25 · disclosed: 2022-03-16 to 2022-02-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.