Gryphon Healthcare

Disclosed Oct 11, 2024393,358 affectedConfirmed

The business associate (BA), Gryphon Healthcare, LLC, reported that one of its partners experienced a ransomware incident that affected the protected health information (PHI) of 393,358 individuals. The PHI involved included clinical and demographic information. The BA notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.

What is known

People affected	393,358 (as reported to HHS)
Disclosed	Oct 11, 2024
Happened	Jul 6, 2024
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Gryphon Healthcare

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Gryphon Healthcare (Business Associate, TX)

Notices filed

Residents of CAOct 11, 2024

California AGCount not stated

TotalOct 11, 2024

HHS archive393,358 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 393358by backfillSource

summary2026-09-25

empty to The business associate (BA), Gryphon Healthcare, LLC, reported that one of its partners experienced a ransomware incident that affected the protected health information (PHI) of 393,358 individuals. The PHI involved included clinical and deby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Gryphon Healthcare