Elizabeth Hospice
Disclosed Dec 14, 20223 years ago35,496 affectedConfirmed
The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards and retrained its employees on patient privacy. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 35,496 (as reported to HHS) |
|---|---|
| Disclosed | Dec 14, 2022 |
| Discovered | Oct 21, 2022 |
| Happened | Oct 21, 2022 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Elizabeth Hospiceoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Elizabeth Hospiceattorneygeneral.delaware.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Elizabeth Hospice (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 14, 2022 | |
| Delaware DOJresidents of DE | Dec 14, 2022 | 3 |
| HHS archivetotal | Dec 14, 2022 | 35,496 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 3 to 35496 · backfill source
- 2026-09-25 · summary: empty to The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. Th · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 3 · backfill source
- 2026-09-25 · discovered: empty to 2022-10-21 · backfill source
- 2026-09-25 · occurred: empty to 2022-10-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.