Healix Infusion Therapy
Disclosed Oct 4, 20232 years ago10,277 affectedConfirmed
The covered entity (CE), Healix Infusion Therapy, LLC, reported that an unauthorized threat actor gained access to the protected health information (PHI) of 10,277 individuals. The PHI involved include clinical, demographic, and financial information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 10,277 (as reported to HHS) |
|---|---|
| Disclosed | Oct 4, 2023 |
| Happened | Sep 8, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2023-12-11 Healix Infusion Therapy Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Healix Infusion Therapyin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Healix Infusion Therapy (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Oct 4, 2023 | 8 |
| Vermont AGresidents of VT | Dec 11, 2023 | |
| HHS archivetotal | Dec 11, 2023 | 10,277 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 648 to 10277 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Healix Infusion Therapy, LLC, reported that an unauthorized threat actor gained access to the protected health information (PHI) of 10,277 individuals. The PHI involved include clinical, demographic, and financial i · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 648 · backfill source
- 2026-09-25 · disclosed: 2023-12-11 to 2023-10-04 · backfill source
- 2026-09-25 · occurred: empty to 2023-09-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.