Fundamental Administrative Services
Disclosed Mar 21, 20251 year ago56,325 affectedConfirmed
The business associate (BA), Fundamental Administrative Services, LLC, reported that it experienced a cybersecurity incident that affected the protected heath information (PHI) of 56,325 individuals. The PHI involved included names, Social Security and drivers’ license numbers, addresses, dates of birth, financial and claims information, diagnoses/conditions, lab results, medications, and treatment information. The BA notified HHS, affected covered entities, affected individuals, and posted substitute notice to its website. In response to the breach, the BA implemented additional administrative, technical, and security safeguards and retrained workforce members to better protect PHI.
What is known
| People affected | 56,325 (as reported to HHS) |
|---|---|
| Disclosed | Mar 21, 2025 |
| Happened | Oct 27, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-08-15 Fundamental Administrative Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Fundamental Administrative Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Fundamental Administrative Services (Business Associate, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 21, 2025 | 56,325 |
| Vermont AGresidents of VT | Aug 15, 2025 | |
| Indiana AGresidents of IN | Aug 15, 2025 | 248 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 50975 to 56325 · backfill source
- 2026-09-25 · disclosed: 2025-08-15 to 2025-03-21 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Fundamental Administrative Services, LLC, reported that it experienced a cybersecurity incident that affected the protected heath information (PHI) of 56,325 individuals. The PHI involved included names, Social · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 50975 · backfill source
- 2026-09-25 · occurred: empty to 2024-10-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.