K and B Surgical Center
Disclosed Jul 28, 20215 years ago14,774 affectedConfirmed
The covered entity (CE), K&B Surgical Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 14,774 individuals. The ePHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, addresses, diagnoses, medications prescribed, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring and identity theft protection services. In response to the breach, the CE disabled its network, secured its systems, hired an IT forensic firm to investigate the breach, retrained workforce members, and implemented additional technical safeguards.
What is known
| People affected | 14,774 (as reported to HHS) |
|---|---|
| Disclosed | Jul 28, 2021 |
| Happened | Mar 24, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: K and B Surgical Centeroag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: K and B Surgical Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): K&B Surgical Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 28, 2021 | 14,774 |
| California AGresidents of CA | Sep 3, 2021 | |
| Indiana AGresidents of IN | Sep 3, 2021 | 18 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 14772 to 14774 · backfill source
- 2026-09-25 · disclosed: 2021-09-03 to 2021-07-28 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), K&B Surgical Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 14,774 individuals. The ePHI involved included names, dates of birth, S · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 14772 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.