Kirkland & Ellis
Disclosed Dec 15, 20232 years ago48,802 affectedConfirmed
The business associate (BA), Kirkland & Ellis, reported that a software application it used exposed the protected health information (PHI) of 48,802 individuals. The PHI involved included names, Social Security and drivers’ license numbers, addresses, dates of birth, financial and claims information, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI.
What is known
| People affected | 48,802 (as reported to HHS) |
|---|---|
| Disclosed | Dec 15, 2023 |
| Discovered | May 31, 2023 |
| Happened | May 27, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Kirkland & Ellisoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Kirkland & Ellisatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-05-28 Kirkland & Ellis Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Kirkland & Ellis (Business Associate, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 15, 2023 | |
| Washington AGresidents of WA | Feb 26, 2024 | 35,274 |
| HHS archivetotal | Feb 29, 2024 | 48,802 |
| Vermont AGresidents of VT | May 28, 2024 | |
| California AGresidents of CA | Jun 12, 2024 | |
| Washington AGresidents of WA | Jun 12, 2024 | 810 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 48802 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Kirkland & Ellis, reported that a software application it used exposed the protected health information (PHI) of 48,802 individuals. The PHI involved included names, Social Security and drivers’ license numbers, · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-05-28-kirkland-ellis-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2023-05-31 · backfill source
- 2026-09-25 · disclosed: 2024-06-12 to 2023-12-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.