Healthcare Services Group

Disclosed Oct 16, 2024624,496 affectedConfirmed

Healthcare Services Group breach exposes data of 624,000 people

Healthcare Services Group said an unauthorized actor copied files between September 27 and October 3, 2024, detected October 7, exposing names, SSNs, driver's license and state ID numbers, financial account data and credentials; notices went out August 25, 2025.

What is known

People affected	624,496 (as reported by the organization)
Disclosed	Oct 16, 2024
Discovered	Oct 7, 2024
Happened	Sep 27, 2024
Attack	Hacking
Data exposed	NamesHealthInsuranceCredentials and tokensBiometricsSocial Security numbersGovernment IDsFinancial
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Healthcare Services Group

Official noticeatg.wa.gov

Washington Attorney General breach notice: Healthcare Services Group

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Healthcare Services Group

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Healthcare Services Group

Newsbleepingcomputer.com

Healthcare Services Group data breach impacts 624,000 people

Official noticeago.vermont.gov

Vermont Attorney General: 2025-08-25 Healthcare Services Group Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2025 data breach report: Healthcare Services Group

SEC filingsec.gov

Healthcare Services Group Inc Form 8-K, Item 8.01 (2024-10-16)

Notices filed

TotalOct 16, 2024

SEC 8-K 8.01Count not stated

Residents of CAAug 25, 2025

California AGCount not stated

Residents of WAAug 25, 2025

Washington AG7,745 people

Residents of DEAug 25, 2025

Delaware DOJ3,930 people

Residents of ORAug 25, 2025

Oregon DOJ624,496 people

TotalAug 25, 2025

Research624,000 people

Residents of VTAug 25, 2025

Vermont AGCount not stated

Residents of INAug 25, 2025

Indiana AG17,490 people

Residents of DEAug 25, 2025

Delaware DOJ3,930 people

History of this record

disclosed2026-09-25

2025-08-25 to 2024-10-16by backfillSource

records2026-09-25

624000 to 624496by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-08-25-healthcare-services-group-data-breach-notice-consumersby backfillSource

attack2026-09-25

ransomware to hackingby seedSource

data_types2026-09-25

["names","health","insurance","credentials","biometrics"] to ["names","health","insurance","credentials","biometrics","ssn","government-id","financial"]by seedSource

records2026-09-25

624496 to 624000by seedSource

summary2026-09-25

empty to Healthcare Services Group said an unauthorized actor copied files between September 27 and October 3, 2024, detected October 7, exposing names, SSNs, driver's license and state ID numbers, financial account data and credentials; notices wenby seedSource

title2026-09-25

empty to Healthcare Services Group breach exposes data of 624,000 peopleby seedSource

data_types2026-09-25

[] to ["names","health","insurance","credentials","biometrics"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 624496by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2024-10-07by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Healthcare Services Group