Skip to content

GrayRobinson

Disclosed Apr 24, 20265 months ago80,383 affectedConfirmed

Official notice

What is known

People affected80,383 (as reported by the organization)
DisclosedApr 24, 2026
DiscoveredApr 13, 2026
HappenedMar 5, 2025
AttackHacking
Data exposedNames, Health, Social Security numbers, Insurance, Payment cards, Financial, Dates of birth, Addresses
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: GrayRobinsonoag.ca.gov · Official notice
HHS OCR breach report: GrayRobinson (Business Associate, FL)ocrportal.hhs.gov · Official notice
Texas Attorney General data security breach report BR-0005015: GrayRobinsonoag.my.site.com · Official notice
Indiana Attorney General 2026 data breach report: GrayRobinsonin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAApr 24
HHS OCRtotalApr 2454,131
Indiana AGresidents of INApr 24234
California AGresidents of CAMay 4
Texas AGresidents of TXMay 5578
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
  • 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance","payment-card","financial","dob","addresses"] · backfill source
  • 2026-09-25 · records_basis: hhs to organization · backfill source
  • 2026-09-25 · records: 54131 to 80383 · backfill source
  • 2026-09-25 · discovered: empty to 2026-04-13 · backfill source
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 54131 · backfill source
  • 2026-09-25 · disclosed: 2026-05-04 to 2026-04-24 · backfill source
  • 2026-09-25 · occurred: empty to 2025-03-05 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about GrayRobinson

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.