FastHealth
Disclosed May 26, 20179 years ago18,192 affectedConfirmed
FastHealth Corporation, a business associate (BA), reported that it was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 18,192 individuals. The ePHI involved included names, addresses, dates of birth, drivers’ license information, Social Security numbers, financial information, diagnoses, and medications prescribed. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI. The BA notified HHS, affected individuals, and the media. OCR provided the BA with technical assistance regarding the HIPAA Breach Notification Rule.
What is known
| People affected | 18,192 (as reported to HHS) |
|---|---|
| Disclosed | May 26, 2017 |
| Discovered | Nov 2, 2017 |
| Happened | Aug 14, 2017 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Payment cards, Financial, Passwords, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: FastHealthoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: FastHealthatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: FastHealthjustice.oregon.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: FastHealthmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): FastHealth (Business Associate, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | May 26, 2017 | |
| Maine AGresidents of ME | May 26, 2017 | 14 |
| HHS archivetotal | Jun 29, 2017 | 18,192 |
| California AGresidents of CA | Feb 27, 2018 | |
| Washington AGresidents of WA | Feb 27, 2018 | 2,876 |
| Oregon DOJresidents of OR | Feb 27, 2018 | 657,529 |
| Maine AGresidents of ME | Feb 27, 2018 | 881 |
| HHS archivetotal | Feb 27, 2018 | 18,192 |
History of this record
- 2026-09-25 · data_types: ["names","ssn","government-id","payment-card","financial","passwords"] to ["names","ssn","government-id","payment-card","financial","passwords","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 18192 · backfill source
- 2026-09-25 · summary: empty to FastHealth Corporation, a business associate (BA), reported that it was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 18,192 individuals. The ePHI involved included names, addresses, dates · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id","payment-card","financial","passwords"] · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2017-11-02 · backfill source
- 2026-09-25 · disclosed: 2018-02-27 to 2017-05-26 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.