Gardner Health Services
Disclosed Apr 1, 202526,000 affectedConfirmed
The covered entity (CE), Gardner Health Services, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 6,197 individuals. The PHI involved includes names, addresses, dates of birth, Social Security numbers, health insurance information, and treatment information. The CE notified HHS, affected individuals, the media, and published substitute notice on its website. The CE provided free credit monitoring to the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 26,000 (as reported to HHS) |
|---|---|
| Disclosed | Apr 1, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.