CoPilot Provider Support Services
Disclosed Jan 18, 20179 years ago221,178 affectedSettled
Breach of 221,178 patient records notified a year late; USD 130,000 NY AG penalty
Healthcare support firm CoPilot waited over a year to notify a data breach that exposed 221,178 patient records. It paid USD 130,000 in penalties to New York.
What is known
| People affected | 221,178 (as reported by the organization) |
|---|---|
| Disclosed | Jan 18, 2017 |
| Discovered | Dec 23, 2015 |
| Attack | Hacking |
| Data exposed | Health, Names, Dates of birth, Addresses |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | USD 130,000 NY AG penalty (June 2017) (about $130K) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: CoPilot Provider Support Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: CoPilot Provider Support Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: CoPilot Provider Support Servicesjustice.oregon.gov · Official notice | Official notice |
| NY AG: Settlement with healthcare services company that deferred breach noticeag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Jan 18, 2017 | 1,522 |
| California AGresidents of CA | Jan 19, 2017 | |
| Oregon DOJresidents of OR | Jan 19, 2017 | 220,000 |
| Researchtotal | Jun 15, 2017 | 221,178 |
History of this record
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · fine_usd: empty to 130000 · seed source
- 2026-09-25 · lawsuit: empty to USD 130,000 NY AG penalty (June 2017) · seed source
- 2026-09-25 · data_types: [] to ["health","names","dob","addresses"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 221178 · seed source
- 2026-09-25 · summary: empty to Healthcare support firm CoPilot waited over a year to notify a data breach that exposed 221,178 patient records. It paid USD 130,000 in penalties to New York. · seed source
- 2026-09-25 · title: empty to Breach of 221,178 patient records notified a year late; USD 130,000 NY AG penalty · seed source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2017-01-19 to 2017-01-18 · backfill source
- 2026-09-25 · discovered: empty to 2015-12-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.