Compumedics USA
Disclosed May 8, 20251 year ago318,150 affectedConfirmed
The business associate (BA), Compumedics USA, reported that it experienced a hacking incident on its network server containing the protected health information (PHI) of 318,150 individuals. The PHI involved in the breach included names, addresses, birthdates, Social Security numbers, diagnoses/conditions, lab results, and medications. The BA notified affected covered entities of the breach and provided breach notification to individuals on behalf of the affected covered entities. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 318,150 (as reported to HHS) |
|---|---|
| Disclosed | May 8, 2025 |
| Happened | Mar 13, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-05-26 Compumedics USA Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Compumedics USAin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Compumedics USA (Business Associate, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 8, 2025 | 3 |
| Vermont AGresidents of VT | May 26, 2025 | |
| HHS archivetotal | Jun 27, 2025 | 318,150 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 414 to 318150 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Compumedics USA, reported that it experienced a hacking incident on its network server containing the protected health information (PHI) of 318,150 individuals. The PHI involved in the breach included names, add · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 414 · backfill source
- 2026-09-25 · disclosed: 2025-05-26 to 2025-05-08 · backfill source
- 2026-09-25 · occurred: empty to 2025-03-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.