Designed Receivable Solutions
Disclosed Mar 23, 20242 years ago585,035 affectedConfirmed
The covered entity (CE), Designed Receivable Solutions, reported that it suffered a cyber-attack that compromised the protected health information (PHI) of 585,035 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, medications, and claims information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 585,035 (as reported by the organization) |
|---|---|
| Disclosed | Mar 23, 2024 |
| Discovered | Jan 22, 2024 |
| Happened | Jan 18, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Finance · US |
| Status | Confirmed |
Sources
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 23, 2024 | 585,035 |
| California AGresidents of CA | Apr 26, 2024 | |
| Washington AGresidents of WA | Apr 26, 2024 | 1,131 |
| Oregon DOJresidents of OR | Apr 26, 2024 | 498,686 |
| Vermont AGresidents of VT | Apr 26, 2024 | |
| Indiana AGresidents of IN | Apr 26, 2024 | 364 |
| Vermont AGresidents of VT | Jun 21, 2024 | |
| California AGresidents of CA | Jun 26, 2024 | |
| California AGresidents of CA | Jul 16, 2024 | |
| Vermont AGresidents of VT | Jul 16, 2024 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2024-04-26 to 2024-03-23 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Designed Receivable Solutions, reported that it suffered a cyber-attack that compromised the protected health information (PHI) of 585,035 individuals. The PHI involved included names, Social Security numbers, addre · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 585035 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-04-26-designed-receivable-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-21-designed-receivable-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-07-16-designed-receivable-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-01-22 · backfill source
- 2026-09-25 · disclosed: 2024-06-26 to 2024-04-26 · backfill source
- 2026-09-25 · disclosed: 2024-07-16 to 2024-06-26 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.