Fora Health
Disclosed Feb 1, 20242 years ago1,568 affectedConfirmed
The covered entity (CE), FORA Health, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 1,568 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, and medications. The CE notified HHS, the affected individuals, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained on email security. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 1,568 (as reported to HHS) |
|---|---|
| Disclosed | Feb 1, 2024 |
| Discovered | Dec 19, 2023 |
| Happened | Dec 14, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Fora Healthjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Fora Health (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Oregon DOJresidents of OR | Feb 1, 2024 | 2,053 |
| HHS archivetotal | May 28, 2024 | 1,568 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1568 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), FORA Health, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 1,568 individuals. The PHI involved included names, addresses, dates · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.