Discovery Practice Management
Disclosed Jun 5, 20215 years ago12,859 affectedConfirmed
Discovery Practice Management, a business associate (BA), reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 12,859 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, medical record numbers, diagnoses, prescription information, and health insurance and financial information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the BA implemented additional administrative and technical safeguards and retrained it staff.
What is known
| People affected | 12,859 (as reported to HHS) |
|---|---|
| Disclosed | Jun 5, 2021 |
| Happened | Jun 22, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Discovery Practice Managementoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Discovery Practice Management (Business Associate, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 5, 2021 | 12,859 |
| California AGresidents of CA | Jul 1, 2021 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 12859 · backfill source
- 2026-09-25 · disclosed: 2021-07-01 to 2021-06-05 · backfill source
- 2026-09-25 · summary: empty to Discovery Practice Management, a business associate (BA), reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 12,859 individuals. The PHI involved included names, addresses, dates · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.