Every public data breach

47 disclosed this week · 26,367 on record

Elizabeth Hospice

Disclosed Dec 14, 202235,496 affectedConfirmed

Official notice

The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards and retrained its employees on patient privacy. OCR provided technical assistance to the CE regarding the HIPAA Rules.

What is known

People affected35,496 (as reported to HHS)
DisclosedDec 14, 2022
DiscoveredOct 21, 2022
HappenedOct 21, 2022
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to insiderby backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
3 to 35496by backfillSource
summary2026-09-25
empty to The Elizabeth Hospice, the covered entity (CE), reported that a workforce member emailed the protected health information (PHI) of 35,496 individuals to a personal email account. The PHI involved included names and treatment information. Thby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 3by backfillSource
discovered2026-09-25
empty to 2022-10-21by backfillSource
occurred2026-09-25
empty to 2022-10-21by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Elizabeth Hospice