Elara Caring
Disclosed May 12, 20264 months ago22,172 affectedConfirmed
The covered entity (CE), Elara Caring, reported that it was notified by its business associate (BA)that it experienced a breach of its network by an unauthorized threat actor. According to the breach report, the breach affected approximately 10,490 individuals. The protected health information (PHI) involved clinical and demographic information. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 22,172 (as reported to HHS) |
|---|---|
| Disclosed | May 12, 2026 |
| Discovered | Apr 17, 2026 |
| Happened | Nov 4, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance, Dates of birth, Social Security numbers, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report: Elara Caring (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005132: Elara Caringoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 12 | 10,490 |
| Texas AGresidents of TX | May 14 | 3,311 |
| HHS OCRtotal | Jun 23 | 22,172 |
| Texas AGresidents of TX | Jun 25 | 2,631 |
History of this record
- 2026-09-25 · disclosed: 2026-05-14 to 2026-05-12 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Elara Caring, reported that it was notified by its business associate (BA)that it experienced a breach of its network by an unauthorized threat actor. According to the breach report, the breach affected approximatel · backfill source
- 2026-09-25 · data_types: ["names","health","insurance","dob"] to ["names","health","insurance","dob","ssn","addresses"] · backfill source
- 2026-09-25 · disclosed: 2026-06-23 to 2026-05-14 · backfill source
- 2026-09-25 · occurred: empty to 2025-11-04 · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","insurance","dob"] · backfill source
- 2026-09-25 · discovered: empty to 2026-04-17 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.