Connexin Software
Disclosed Nov 11, 20223 years ago2,846,039 affectedConfirmed
Connexin Software, the business associate (BA), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 2,675,934 individuals. The PHI involved in the incident included names, addresses, dates of birth, social security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to this incident, the BA updated its HIPAA policies and procedures to help prevent future security incidents and implemented new administrative and technical safeguards, such as muti-factor authentication.
What is known
| People affected | 2,846,039 (as reported to HHS) |
|---|---|
| Disclosed | Nov 11, 2022 |
| Discovered | Aug 26, 2022 |
| Happened | Jul 17, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Connexin Softwareoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Connexin Softwareatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Connexin Softwarejustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2022 11 28 Connexin Software Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Connexin Software (Business Associate, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 11, 2022 | 2,846,039 |
| California AGresidents of CA | Nov 14, 2022 | |
| Oregon DOJresidents of OR | Nov 14, 2022 | 2,216,365 |
| Vermont AGresidents of VT | Nov 28, 2022 | |
| Washington AGresidents of WA | Jun 14, 2023 | 29,600 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2846039 · backfill source
- 2026-09-25 · disclosed: 2022-11-14 to 2022-11-11 · backfill source
- 2026-09-25 · summary: empty to Connexin Software, the business associate (BA), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 2,675,934 individuals. The PHI involved in the incident included names, addresses, dates o · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2022-11-28-connexin-software-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2022-08-26 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.