Healthcare Interactive
Disclosed Sep 22, 20251 year ago3,056,950 affectedConfirmed
What is known
| People affected | 3,056,950 (as reported by the organization) |
|---|---|
| Disclosed | Sep 22, 2025 |
| Discovered | Jul 22, 2025 |
| Happened | Jun 17, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health, Insurance, Social Security numbers, Dates of birth, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Healthcare Interactiveoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Healthcare Interactiveatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Healthcare Interactiveattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Healthcare Interactivejustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Healthcare Interactive (Business Associate, MD)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004709: Healthcare Interactiveoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-12-02 Healthcare Interactive Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Healthcare Interactivein.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Sep 22, 2025 | 501 |
| Delaware DOJresidents of DE | Dec 2, 2025 | 2,923 |
| Vermont AGresidents of VT | Dec 2, 2025 | |
| Indiana AGresidents of IN | Dec 2, 2025 | 297 |
| California AGresidents of CA | Dec 4, 2025 | |
| Texas AGresidents of TX | Dec 5, 2025 | 32,493 |
| Washington AGresidents of WA | Jan 7 | 46,840 |
| Oregon DOJresidents of OR | Jan 7 | 3,056,950 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-02-healthcare-interactive-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","health","insurance"] to ["names","health","insurance","ssn","dob","addresses"] · backfill source
- 2026-09-25 · disclosed: 2025-12-02 to 2025-09-22 · backfill source
- 2026-09-25 · data_types: [] to ["names","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 3056950 · backfill source
- 2026-09-25 · disclosed: 2025-12-04 to 2025-12-02 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-07-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.