Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Gainwell Technologies

Disclosed Sep 26, 2025912 affectedConfirmed

Official notice

The covered entity (CE), Gainwell Technologies, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 912 individuals. The PHI included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, and the media of the breach, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect PHI. OCR provided the CE with technical assistance.

What is known

People affected912 (as reported to HHS)
DisclosedSep 26, 2025
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Gainwell Technologies (Business Associate, TX)

Notices filed

TotalSep 26, 2025
HHS archive912 people

Other breaches at Gainwell Technologies

Insider breachInsider exposed names and health records. Reported to the HHS archive.810 affectedHealthcareUSMar 10, 2022Insider breachInsider exposed names and health records. Reported to the HHS archive.3,317 affectedHealthcareUSDec 22, 2020
History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Gainwell Technologies