Skip to content

Gryphon Healthcare

Disclosed Oct 11, 20241 year ago393,358 affectedConfirmed

Official notice

The business associate (BA), Gryphon Healthcare, LLC, reported that one of its partners experienced a ransomware incident that affected the protected health information (PHI) of 393,358 individuals. The PHI involved included clinical and demographic information. The BA notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.

What is known

People affected393,358 (as reported to HHS)
DisclosedOct 11, 2024
HappenedJul 6, 2024
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Gryphon Healthcareoag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): Gryphon Healthcare (Business Associate, TX)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAOct 11, 2024
HHS archivetotalOct 11, 2024393,358
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 393358 · backfill source
  • 2026-09-25 · summary: empty to The business associate (BA), Gryphon Healthcare, LLC, reported that one of its partners experienced a ransomware incident that affected the protected health information (PHI) of 393,358 individuals. The PHI involved included clinical and de · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Gryphon Healthcare

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.