The covered entity (CE), La Clinica de La Raza, reported that a subcontractor of its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 11,403 individuals. The PHI involved clinical, demographic, and financial information. The CE notified HHS, affected individuals, and published notice on its website; the subcontractor notified affected individuals and the media. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 11403 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), La Clinica de La Raza, reported that a subcontractor of its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 11,403 individuals. The PHI involved clinic · backfill source
