Gilead Sciences
Disclosed Apr 2, 20251 year ago12,224 affectedConfirmed
The covered entity (CE), Gilead Sciences, Inc., reported that its business associate (BA) made the protected health information (PHI) of 12,224 individuals viewable during mailing. The PHI involved included names, addresses, and Social Security numbers. The CE notified HHS, the media, and the affected individuals. In response to the breach, the CE provided free credit monitoring to affected individuals.
What is known
| People affected | 12,224 (as reported by the organization) |
|---|---|
| Disclosed | Apr 2, 2025 |
| Happened | Feb 12, 2025 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Gilead Sciencesoag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-04-02 Gilead Sciences Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Gilead Sciencesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Gilead Sciences (Health Plan, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 2, 2025 | |
| Vermont AGresidents of VT | Apr 2, 2025 | |
| Indiana AGresidents of IN | Apr 2, 2025 | 40 |
| HHS archivetotal | Apr 2, 2025 | 12,224 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Gilead Sciences, Inc., reported that its business associate (BA) made the protected health information (PHI) of 12,224 individuals viewable during mailing. The PHI involved included names, addresses, and Social Secu · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 12224 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-04-02-gilead-sciences-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.