Healthpointe Medical Group
Disclosed Aug 30, 20215 years ago11,000 affectedConfirmed
The covered entity (CE), Healthpointe Medical Group, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 11,000 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE retrained its workforce members and implemented additional technical safeguards.
What is known
| People affected | 11,000 (as reported to HHS) |
|---|---|
| Disclosed | Aug 30, 2021 |
| Happened | Jun 9, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Healthpointe Medical Groupoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: Healthpointe Medical Groupin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Healthpointe Medical Group (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 30, 2021 | |
| Indiana AGresidents of IN | Aug 30, 2021 | 1 |
| HHS archivetotal | Aug 30, 2021 | 11,000 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 781 to 11000 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Healthpointe Medical Group, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 11,000 individuals. The PHI involved included names, addresses, dates of · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 781 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.