CoPilot Provider Support Services

Disclosed Jan 18, 2017221,178 affectedSettled

Breach of 221,178 patient records notified a year late; USD 130,000 NY AG penalty

Healthcare support firm CoPilot waited over a year to notify a data breach that exposed 221,178 patient records. It paid USD 130,000 in penalties to New York.

What is known

People affected	221,178 (as reported by the organization)
Disclosed	Jan 18, 2017
Discovered	Dec 23, 2015
Attack	Hacking
Data exposed	HealthNamesDates of birthAddresses
Sector	Healthcare · US
Status	Settled
Lawsuit or fine	USD 130,000 NY AG penalty (June 2017) (about $130K)

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: CoPilot Provider Support Services

Official noticeatg.wa.gov

Washington Attorney General breach notice: CoPilot Provider Support Services

Official noticejustice.oregon.gov

Oregon DOJ breach notice: CoPilot Provider Support Services

Regulatorag.ny.gov

NY AG: Settlement with healthcare services company that deferred breach notice

Notices filed

Residents of WAJan 18, 2017

Washington AG1,522 people

Residents of CAJan 19, 2017

California AGCount not stated

Residents of ORJan 19, 2017

Oregon DOJ220,000 people

TotalJun 15, 2017

Research221,178 people

History of this record

status2026-09-25

confirmed to settledby seedSource

fine_usd2026-09-25

empty to 130000by seedSource

lawsuit2026-09-25

empty to USD 130,000 NY AG penalty (June 2017)by seedSource

data_types2026-09-25

[] to ["health","names","dob","addresses"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 221178by seedSource

summary2026-09-25

empty to Healthcare support firm CoPilot waited over a year to notify a data breach that exposed 221,178 patient records. It paid USD 130,000 in penalties to New York.by seedSource

title2026-09-25

empty to Breach of 221,178 patient records notified a year late; USD 130,000 NY AG penaltyby seedSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2017-01-19 to 2017-01-18by backfillSource

discovered2026-09-25

empty to 2015-12-23by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about CoPilot Provider Support Services