Core Recovery
Disclosed Jun 16, 20233 years ago2,656 affectedConfirmed
Core Recovery, the covered entity (CE), reported that a former employee hacked into its email system and compromised the protected health information (PHI) of 2,656 individuals. The PHI involved included names, diagnoses, lab results, medications, Social Security and drivers’ license numbers, addresses, birthdates, and claims and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the CE implemented additional administrative and technical safeguards.
What is known
| People affected | 2,656 (as reported to HHS) |
|---|---|
| Disclosed | Jun 16, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Core Recovery (Healthcare Provider, AZ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 16, 2023 | 2,656 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.