Hiawatha Harris MD
Disclosed May 18, 20233 years ago9,182 affectedConfirmed
Hiawatha Harris MD, dba Pathways to Wellness Medication Clinics, the covered entity (CE), reported that it experienced a ransomware incident that compromised the protected health information (PHI) of approximately 9,182 individuals. The PHI involved included names, addresses, birthdates, and Social Security numbers. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring and identity theft protection services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 9,182 (as reported to HHS) |
|---|---|
| Disclosed | May 18, 2023 |
| Happened | Mar 21, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Hiawatha Harris MDoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hiawatha Harris MD (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 18, 2023 | 9,182 |
| California AGresidents of CA | Aug 17, 2023 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 9182 · backfill source
- 2026-09-25 · disclosed: 2023-08-17 to 2023-05-18 · backfill source
- 2026-09-25 · summary: empty to Hiawatha Harris MD, dba Pathways to Wellness Medication Clinics, the covered entity (CE), reported that it experienced a ransomware incident that compromised the protected health information (PHI) of approximately 9,182 individuals. The PHI · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.