Every public data breach

44 disclosed this week · 26,355 on record

Gardner Health Services

Disclosed Apr 1, 202526,000 affectedConfirmed

Official notice

The covered entity (CE), Gardner Health Services, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 6,197 individuals. The PHI involved includes names, addresses, dates of birth, Social Security numbers, health insurance information, and treatment information. The CE notified HHS, affected individuals, the media, and published substitute notice on its website. The CE provided free credit monitoring to the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.

What is known

People affected26,000 (as reported to HHS)
DisclosedApr 1, 2025
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
records2026-09-25
6197 to 26000by backfillSource
disclosed2026-09-25
2025-12-22 to 2025-04-01by backfillSource
attack2026-09-25
unknown to insiderby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 6197by backfillSource
disclosed2026-09-25
2025-12-23 to 2025-12-22by backfillSource
summary2026-09-25
empty to The covered entity (CE), Gardner Health Services, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 6,197 individuals. The PHI involved includesby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Gardner Health Services