Kirkland & Ellis

Disclosed Dec 15, 202348,802 affectedConfirmed

The business associate (BA), Kirkland & Ellis, reported that a software application it used exposed the protected health information (PHI) of 48,802 individuals. The PHI involved included names, Social Security and drivers’ license numbers, addresses, dates of birth, financial and claims information, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI.

What is known

People affected	48,802 (as reported to HHS)
Disclosed	Dec 15, 2023
Discovered	May 31, 2023
Happened	May 27, 2023
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Kirkland & Ellis

Official noticeatg.wa.gov

Washington Attorney General breach notice: Kirkland & Ellis

Official noticeago.vermont.gov

Vermont Attorney General: 2024-05-28 Kirkland & Ellis Data Breach Notice to Consumers

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Kirkland & Ellis (Business Associate, IL)

Notices filed

Residents of CADec 15, 2023

California AGCount not stated

Residents of WAFeb 26, 2024

Washington AG35,274 people

TotalFeb 29, 2024

HHS archive48,802 people

Residents of VTMay 28, 2024

Vermont AGCount not stated

Residents of CAJun 12, 2024

California AGCount not stated

Residents of WAJun 12, 2024

Washington AG810 people

History of this record

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 48802by backfillSource

summary2026-09-25

empty to The business associate (BA), Kirkland & Ellis, reported that a software application it used exposed the protected health information (PHI) of 48,802 individuals. The PHI involved included names, Social Security and drivers’ license numbers,by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-05-28-kirkland-ellis-data-breach-notice-consumersby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2023-05-31by backfillSource

disclosed2026-09-25

2024-06-12 to 2023-12-15by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Kirkland & Ellis