Coos Health & Wellness
Disclosed Sep 7, 20233 years ago22,115 affectedConfirmed
The covered entity (CE), Coos Health and Wellness, reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 22,115 individuals. The PHI involved includes names, Social Security and drivers’ license numbers, birthdates, addresses, and health insurance information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE updated its administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 22,115 (as reported to HHS) |
|---|---|
| Disclosed | Sep 7, 2023 |
| Discovered | Apr 28, 2023 |
| Happened | Apr 28, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Coos Health & Wellnessjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-12-15 Coos Health & Wellness Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Coos Health & Wellness (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 7, 2023 | 22,115 |
| Oregon DOJresidents of OR | Dec 15, 2023 | 14,040 |
| Vermont AGresidents of VT | Dec 15, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 22115 · backfill source
- 2026-09-25 · disclosed: 2023-12-15 to 2023-09-07 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Coos Health and Wellness, reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 22,115 individuals. The PHI involved includes names, Social Security and dri · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-12-15-coos-health-wellness-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.