Breachesby GlyphHi-School Pharmacy
Disclosed Dec 5, 202312,779 affectedConfirmed
Hi-School Pharmacy, the covered entity (CE), reported that it experienced a cyber-attack which compromised the protected health information (PHI) of 12,779 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, medications, and prescription information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach and OCR’s investigation, the CE revised its policies and procedures, retrained its workforce members, and implemented additional technical safeguards.
What is known
| People affected | 12,779 (as reported to HHS) |
|---|---|
| Disclosed | Dec 5, 2023 |
| Discovered | Nov 21, 2023 |
| Happened | Nov 2, 2023 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 12779by backfillSource
2023-12-06 to 2023-12-05by backfillSource
empty to Hi-School Pharmacy, the covered entity (CE), reported that it experienced a cyber-attack which compromised the protected health information (PHI) of 12,779 individuals. The PHI involved included names, addresses, dates of birth, Social Secuby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.