DAP Health

Disclosed Sep 24, 2024129,048 affectedConfirmed

The covered entity (CE), DAP Health, reported that employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 129,048 individuals. The PHI involved demographic, clinical, and financial information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE implemented additional administrative, technical, and security safeguards. OCR provided the CE with technical assistance.

What is known

People affected	129,048 (as reported to HHS)
Disclosed	Sep 24, 2024
Happened	Jul 8, 2024
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: DAP Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): DAP Health (Healthcare Provider, CA)

Notices filed

TotalSep 24, 2024

HHS archive129,048 people

Residents of CADec 26, 2024

California AGCount not stated

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 129048by backfillSource

disclosed2026-09-25

2024-12-26 to 2024-09-24by backfillSource

summary2026-09-25

empty to The covered entity (CE), DAP Health, reported that employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 129,048 individuals. The PHI involved demographic, clinical, and financial inby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about DAP Health