Healthcare Services Group
Disclosed Oct 16, 20241 year ago624,496 affectedConfirmed
Healthcare Services Group breach exposes data of 624,000 people
Healthcare Services Group said an unauthorized actor copied files between September 27 and October 3, 2024, detected October 7, exposing names, SSNs, driver's license and state ID numbers, financial account data and credentials; notices went out August 25, 2025.
What is known
| People affected | 624,496 (as reported by the organization) |
|---|---|
| Disclosed | Oct 16, 2024 |
| Discovered | Oct 7, 2024 |
| Happened | Sep 27, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance, Credentials and tokens, Biometrics, Social Security numbers, Government IDs, Financial |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Healthcare Services Groupoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Healthcare Services Groupatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Healthcare Services Groupattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Healthcare Services Groupjustice.oregon.gov · Official notice | Official notice |
| Healthcare Services Group data breach impacts 624,000 peoplebleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-08-25 Healthcare Services Group Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Healthcare Services Groupin.gov · Official notice | Official notice |
| Healthcare Services Group Inc Form 8-K, Item 8.01 (2024-10-16)sec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| SEC 8-K 8.01total | Oct 16, 2024 | |
| California AGresidents of CA | Aug 25, 2025 | |
| Washington AGresidents of WA | Aug 25, 2025 | 7,745 |
| Delaware DOJresidents of DE | Aug 25, 2025 | 3,930 |
| Oregon DOJresidents of OR | Aug 25, 2025 | 624,496 |
| Researchtotal | Aug 25, 2025 | 624,000 |
| Vermont AGresidents of VT | Aug 25, 2025 | |
| Indiana AGresidents of IN | Aug 25, 2025 | 17,490 |
History of this record
- 2026-09-25 · disclosed: 2025-08-25 to 2024-10-16 · backfill source
- 2026-09-25 · records: 624000 to 624496 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-08-25-healthcare-services-group-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: ransomware to hacking · seed source
- 2026-09-25 · data_types: ["names","health","insurance","credentials","biometrics"] to ["names","health","insurance","credentials","biometrics","ssn","government-id","financial"] · seed source
- 2026-09-25 · records: 624496 to 624000 · seed source
- 2026-09-25 · summary: empty to Healthcare Services Group said an unauthorized actor copied files between September 27 and October 3, 2024, detected October 7, exposing names, SSNs, driver's license and state ID numbers, financial account data and credentials; notices wen · seed source
- 2026-09-25 · title: empty to Healthcare Services Group breach exposes data of 624,000 people · seed source
- 2026-09-25 · data_types: [] to ["names","health","insurance","credentials","biometrics"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 624496 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-10-07 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.