Gardner Health Services
Disclosed Apr 1, 20251 year ago26,000 affectedConfirmed
The covered entity (CE), Gardner Health Services, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 6,197 individuals. The PHI involved includes names, addresses, dates of birth, Social Security numbers, health insurance information, and treatment information. The CE notified HHS, affected individuals, the media, and published substitute notice on its website. The CE provided free credit monitoring to the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 26,000 (as reported to HHS) |
|---|---|
| Disclosed | Apr 1, 2025 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Gardner Health Servicesoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Gardner Health Services (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 1, 2025 | 26,000 |
| HHS archivetotal | Dec 22, 2025 | 6,197 |
| California AGresidents of CA | Dec 23, 2025 |
History of this record
- 2026-09-25 · records: 6197 to 26000 · backfill source
- 2026-09-25 · disclosed: 2025-12-22 to 2025-04-01 · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 6197 · backfill source
- 2026-09-25 · disclosed: 2025-12-23 to 2025-12-22 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Gardner Health Services, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 6,197 individuals. The PHI involved includes · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.